Wpgraphql Security Vulnerabilities and Issues — Wpgraphql CVE List

Lucene search

WpengineWpgraphql

2 matches found

CVE•added 2019/06/10 6:29 p.m.•88 views

CVE-2019-9881

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.

5.3CVSS5.6AI score0.21595EPSS

CVE•added 2024/01/16 4:15 p.m.•67 views

CVE-2022-1563

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.

5.3CVSS5.4AI score0.00549EPSS