Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/30 4:17 p.m.•2 views

CVE-2026-119700

WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine object existence through distinct error responses. Attackers can iterate IDs against deleteMediaItem, updateMediaItem, deleteComment and updateComment mutations to discover...

6.9CVSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/30 3:16 p.m.•7 views

CVE-2026-119700 WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine object existence through distinct error responses. Attackers can iterate IDs against deleteMediaItem, updateMediaItem, deleteComment and updateComment mutations to discover...

6.9CVSS
SaveExploits0References7
CVE
CVE
•added 2026/10/30 3:16 p.m.•3 views

CVE-2026-119700

The WPGraphQL plugin (versions before 2.24.2 ) contains an information disclosure vulnerability. Unauthenticated attackers can determine the existence of objects by observing distinct error responses when iterating IDs against the deleteMediaItem , updateMediaItem , deleteComment , and updateComm...

6.9CVSS5.8AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/10/30 3:16 p.m.•3 views

EUVD-2026-114105

WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine object existence through distinct error responses. Attackers can iterate IDs against deleteMediaItem, updateMediaItem, deleteComment and updateComment mutations to discover...

6.9CVSS5.8AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•2 views

CVE-2026-119700: WPGraphQL: WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to…

WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine object existence through distinct error responses. Attackers can iterate IDs against deleteMediaItem, updateMediaItem, deleteComment and updateComment mutations to discover...

6.9CVSS5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•1 views

PT-2026-133634

WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine object existence through distinct error responses. Attackers can iterate IDs against deleteMediaItem, updateMediaItem, deleteComment and updateComment mutations to discover...

6.9CVSS5.9AI score
SaveExploits0References8
Rows per page
Query Builder