WordPress plugin REST API TO MiniProgram 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress REST API TO MiniProgram plugin <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover vulnerability

Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover vulnerability discovered by wesley wcraft in WordPress Plugin REST API TO MiniProgram versions = 4.7.1...

PT-2024-39050 · WordPress · Rest Api To Miniprogram

Name of the Vulnerable Software and Affected Versions: REST API TO MiniProgram plugin for WordPress versions up to, and including, 4.7.1 Description: The issue is related to SQL Injection via the order parameter of the "/wp-json/watch-life-net/v1/comment/getcomments" API endpoint. This is due to...

Malicious code in @ks-radar/mini-program (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2663 Malicious code in @ks-radar/mini-program (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-43299

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

Design/Logic Flaw

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

PT-2022-11201 · Tencent · Wechat

Name of the Vulnerable Software and Affected Versions: WeChat versions 8.0.10 Description: A mini program in the WeChat application can obtain sensitive information from a user's address book via wx.searchContacts. This issue allows unauthorized access to user data. Recommendations: For WeChat...

CVE-2021-24303

The CVE-2021-24303 entry concerns the WordPress plugin “JiangQie Official Website Mini Program” (before v1.1.1). The vulnerability arises because the id GET parameter is not escaped/validated before being used in SQL statements, enabling SQL injection. Impact is described as high (per CVE data) w...

CVE-2021-24303: Improper Neutralization of Special Elements used in an SQL Command

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues...

WordPress JiangQie Official Website Mini Program plugin <= 1.1.0 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by ja9er in WordPress JiangQie Official Website Mini Program plugin versions = 1.1.0. Solution Update the WordPress JiangQie Official Website Mini Program plugin to the latest available version at least 1.1.1...

Anhui Weitong Technology Co., Ltd. Weitong open source mall management platform there are XML entity injection vulnerabilities

Microteam Mall is an open source WeChat small program mall front and back end open source : uniapp + Java, with seconds , coupons , multi-merchant , live selling , distribution and other functions , can be used to quickly build a WeChat small program mall . Anhui Weitong Technology Co., Ltd...

Chengdu Crazy Horse Crazy Horse Technology Co., Ltd Crazy Horse Fitness WeChat mini-program has a logic flaw vulnerability

Chengdu Crazy Horse Crazy Horse Technology Co. was founded on December 27, 2017 . The company's business scope includes: software research and development, technical development of network equipment, technical consulting, technical services, technology transfer and so on. Chengdu Crazy Horse Craz...

File Upload Vulnerability in LaiKe Full Scene Ecommerce System

LaiKe full-scene e-commerce system is a WeChat small program e-commerce platform front and back end open source PHP, including distribution, group, lottery, red packets and other functions , the entire system architecture is very simple , suitable for small teams or individual developers secondar...