REST API TO MiniProgram

Cross Site Request Forgery (CSRF) vulnerability <= 4.7.1

Unauthenticated SQL Injection vulnerability <= 4.7.1

Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover vulnerability <= 4.7.1

Subscriber+ Attachment Deletion vulnerability <= 4.6.9