CVE-2019-25060

🗓️ 09 May 2022 16:50:25Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 2112 Views

The WPGraphQL WordPress plugin before 0.3.5 allows remote attackers to access information about other users' roles

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-25060	9 May 202220:36	–	circl
CNNVD	WordPress plugin WPGraphQL 访问控制错误漏洞	9 May 202200:00	–	cnnvd
CNVD	WordPress plugin WPGraphQL access control error vulnerability	12 May 202200:00	–	cnvd
Cvelist	CVE-2019-25060 WP-GraphQL < 0.3.5 - Improper Access Control	9 May 202216:50	–	cvelist
EUVD	EUVD-2022-5489	3 Oct 202520:07	–	euvd
Github Security Blog	Improper Access Control in wp-graphql	10 May 202200:00	–	github
NVD	CVE-2019-25060	9 May 202217:15	–	nvd
OSV	GHSA-W3XG-7Q6M-3XWP Improper Access Control in wp-graphql	10 May 202200:00	–	osv
Prion	Design/Logic Flaw	9 May 202217:15	–	prion
RedhatCVE	CVE-2019-25060	22 May 202505:03	–	redhatcve

NVD

Vulners

Node

wpgraphql wpgraphqlRange<0.3.5wordpress

[
  {
    "product": "WPGraphQL",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "0.3.5",
        "status": "affected",
        "version": "0.3.5",
        "versionType": "custom"
      }
    ]
  }
]