Lucene search
Veracode Vulnerability DatabaseVERACODE:20514HistoryJun 11, 2019 - 5:57 a.m.
Information Disclosure
2019-06-1105:57:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.039
Percentile
92.1%
wp-graphql/wp-graphql is vulnerable to information disclosure. The attacker can get all the information about wordpress users such as email address, role and username just by querying current user’s RootQuery.
Related
osv
osv
CVE-2019-9880
2019-06-10 18:29:01
nvd
nvd
CVE-2019-9880
2019-06-10 18:29:01
prion
prion
Design/Logic Flaw
2019-06-10 18:29:00
cvelist
cvelist
CVE-2019-9880
2019-06-10 17:32:39
cve
cve
CVE-2019-9880
2019-06-10 18:29:01
packetstorm
packetstorm
WordPress WPGraphQL 0.2.3 Authentication Bypass / Information Disclosure
2019-05-21 00:00:00
zdt
zdt
WordPress WPGraphQL 0.2.3 Plugin - Multiple Vulnerabilities
2019-05-21 00:00:00
checkpoint_advisories
checkpoint_advisories
wpvulndb
wpvulndb
WPGraphQL <= 0.2.3 - Multiple Vulnerabilities
2019-05-08 00:00:00
exploitdb
exploitdb
WordPress Plugin WPGraphQL 0.2.3 - Multiple Vulnerabilities
2019-05-21 00:00:00