The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled...
5.3CVSS5.3AI score0.18832EPSS
SaveExploits4References5
Cvelist•added 2019/06/10 5:37 p.m.•38 views
CVE-2019-9881
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled...