WPGraphQL <= 0.2.3 - Multiple Vulnerabilities

🗓️ 08 May 2019 00:00:00Reported by Simone QuatriniType

Weaknesses in WPGraphQL version 0.2.3 allow unauthorized users to perform administrative actions and access protected conten

Reporter	Title	Published	Views	Family All 20
0day.today	WordPress WPGraphQL 0.2.3 Plugin - Multiple Vulnerabilities	21 May 201900:00	–	zdt
Packet Storm	WordPress WPGraphQL 0.2.3 Authentication Bypass / Information Disclosure	21 May 201900:00	–	packetstorm
Check Point Advisories	WordPress Plugin WPGraphQL Information Disclosure (CVE-2019-9879; CVE-2019-9880; CVE-2019-9881)	24 Jun 201900:00	–	checkpoint_advisories
Prion	Code injection	10 Jun 201918:29	–	prion
Prion	Design/Logic Flaw	10 Jun 201918:29	–	prion
Prion	Design/Logic Flaw	10 Jun 201918:29	–	prion
OSV	CVE-2019-9880	10 Jun 201918:29	–	osv
OSV	CVE-2019-9879	10 Jun 201918:29	–	osv
OSV	CVE-2019-9881	10 Jun 201918:29	–	osv
Cvelist	CVE-2019-9879	10 Jun 201917:28	–	cvelist

Vulners

Node

wp-graphql wp-graphqlRange<0.3.0

Source	Link
pentestpartners	www.pentestpartners.com/security-blog/pwning-wordpress-graphql/
github	www.github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py
github	www.github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 May 2019 00:00Current

2.9Low risk

Vulners AI Score2.9

EPSS0.219