Wp-graphql vulnerabilities
Products
Newest
- wp-graphql WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost 5.4 Medium
- wp-graphql WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design) 6.9 Medium
- wp-graphql WPGraphQL Repo's updateComment allows low-privileged authenticated users to change comment moderation status (comment_approved) without moderate_comments permission 4.3 Medium
- wp-graphql WPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release Workflow 7.7 High