wp-graphql/wp-graphql
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost | wp-graphql/wp-graphql | Composer | Medium | No fix reported | |
| WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design) | wp-graphql/wp-graphql | Composer | Medium | No fix reported | |
| WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF) | wp-graphql/wp-graphqlwp-graphql | ComposerWordPress | Medium | Fix reported | |
| Improper Access Control in wp-graphql | wp-graphql/wp-graphqlwp-graphql | ComposerWordPress | Medium | Fix reported |