wp-graphql/wp-graphql
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost | wp-graphql/wp-graphql | Composer | متوسط | اصلاح اعلام نشده | |
| WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design) | wp-graphql/wp-graphql | Composer | متوسط | اصلاح اعلام نشده | |
| WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF) | wp-graphql/wp-graphqlwp-graphql | ComposerWordPress | متوسط | اصلاح گزارش شده | |
| Improper Access Control in wp-graphql | wp-graphql/wp-graphqlwp-graphql | ComposerWordPress | متوسط | اصلاح گزارش شده |