CVE-2026-92099

WPGraphQL Smart Cache WordPress plugin versions prior to 2.3.2 fail to require authorisation or validate a caller-supplied query identifier before storing a persisted query. This allows unauthenticated users to publish arbitrary GraphQL query documents and claim query aliases (alias squatting) be...