Wpgraphql vulnerabilities

Products

• Wpgraphql 9

Newest

• wpgraphql WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation CVE-2026-119702 6.9 MediumOctober 30, 2026
• wpgraphql WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations CVE-2026-119701 6.9 MediumOctober 30, 2026
• wpgraphql WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations CVE-2026-119700 6.9 MediumOctober 30, 2026
• unknown wpgraphql smart cache, wpgraphql smart cache +1 more WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS CVE-2026-119699 6.9 MediumOctober 30, 2026
• wpgraphql WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability CVE-2026-109703 5.3 MediumOctober 13, 2026
• wpgraphql WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability CVE-2026-40762 7.5 HighJune 15, 2026
• wpgraphql WordPress Plugin WPGraphQL 1.3.5 Denial of Service CVE-2021-47959 8.7 HighMay 15, 2026
• wpgraphql WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-68604 5.4 MediumMay 7, 2026
• wpengine wpgraphql WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF) CVE-2023-23684 Fix available 4.4 MediumJune 30, 2023
• unknown wpgraphql WP-GraphQL < 0.3.5 - Improper Access Control CVE-2019-25060 Fix available 5.3 MediumMay 9, 2022