What is CVE-2023-0551?

CVE-2023-0551 is a medium-severity vulnerability in Minapper Rest API To Miniprogram, classified under CWE-284 IMPROPER ACCESS CONTROL. CVSS score: 5.4/10. Published 2023-08-16.

How severe is CVE-2023-0551?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Is CVE-2023-0551 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Minapper Rest API To Miniprogram

CVE-2023-0551

The REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action, allowing ay authenticated users, such as subscriber to call and delete arbitrary attachments

EPSS: 0.003 (20.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.

Affected products

Minapper Rest_api_to_miniprogram
Unknown Rest Api To Miniprogram — versions 0

Public proof-of-concept exploits

20142995/nuclei-templates

References

contact@wpscan.com (Exploit, technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-0551?: CVE-2023-0551 is a medium-severity vulnerability in Minapper Rest API To Miniprogram, classified under CWE-284 IMPROPER ACCESS CONTROL. CVSS score: 5.4/10. Published 2023-08-16.
How severe is CVE-2023-0551?: Medium severity. CVSS v3 base score is 5.4 out of 10.
Is CVE-2023-0551 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.