Xjb vulnerabilities
We track 2 vulnerabilities in Xjb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Xjb vulnerabilities
- 9.8 Critical severity
REST API TO MiniProgram: Authorization Bypass Through User-Controlled Key
The REST API TO MiniProgram plugin for WordPress is vulnerable to privilege escalation via account takeovr in all versions up to, and including, 4.7.1 via the updateUserInfo() due to missing validation on the 'openid' user controlled key that determines what u
- 7.5 High severity
REST API TO MiniProgram: Improper Neutralization of Special Elements used in an SQL Command
The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments REST API endpoint in all versions up to, and including, 4.7.1 due to insufficient escaping on the us