Advisories · Technology
WPGraphQL.
Every CVE that names WPGraphQL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation
- WPGraphQL
- Broken access control
- CVSS 6.9 Medium
WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations
- WPGraphQL
- Denial of service
- CVSS 6.9 Medium
WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations
- WPGraphQL
- CWE-204
- CVSS 5.3 Medium
WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability
- WPGraphQL
- Broken access control
- CVSS 7.5 High
WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability
- WPGraphQL
- SQL injection
- CVSS 8.7 High
WordPress Plugin WPGraphQL 1.3.5 Denial of Service
- WPGraphQL
- Denial of service
- CVSS 5.4 Medium
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
- WPGraphQL
- Cross-site request forgery (CSRF)