Security
فارسی
All products

wp-graphql

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WPGraphQL <= 2.26.0 - Unauthenticated Information ExposureCVE-2026-109703 wp-graphql WordPress Medium Fix reported
WPGraphQL <= 2.5.3 - Cross-Site Request ForgeryCVE-2025-68604 wp-graphql WordPress Medium Fix reported
WPGraphQL < 2.11.1 - Unauthenticated SQL InjectionCVE-2026-40762 wp-graphql WordPress High Fix reported
WPGraphQL <= 2.9.1 - Missing AuthorizationCVE-2026-33290 wp-graphql WordPress Medium Fix reported
WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF)CVE-2023-23684 · GHSA-CFH4-7WQ9-6PGG wp-graphql/wp-graphqlwp-graphql ComposerWordPress Medium Fix reported
WPGraphQL <= 1.3.5 - Denial of ServiceCVE-2021-31157 wp-graphql WordPress Medium Fix reported
Improper Access Control in wp-graphqlCVE-2019-25060 · GHSA-W3XG-7Q6M-3XWP wp-graphql/wp-graphqlwp-graphql ComposerWordPress Medium Fix reported
WPGraphQL <= 0.2.3 - Information ExposureCVE-2019-9880 wp-graphql WordPress Critical Fix reported
WPGraphQL <= 0.2.3 - Administrative User CreationCVE-2019-9879 wp-graphql WordPress Critical Fix reported
WPGraphQL <= 0.2.3 - Unauthenticated Comment CreationCVE-2019-9881 wp-graphql WordPress Medium Fix reported