Wpgraphql WPGraphQL vulnerabilities
8 published CVEs name Wpgraphql WPGraphQL among the affected products.
- 8Published CVEs8 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119702
WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation
WPGraphQL · WPGraphQL
Medium6.9 - CVE-2026-119701
WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations
WPGraphQL · WPGraphQL
Medium6.9 - CVE-2026-119700
WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations
WPGraphQL · WPGraphQL
Medium6.9 - CVE-2026-109703
WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability
WPGraphQL · WPGraphQL
Medium5.3 - CVE-2026-40762
WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability
WPGraphQL · WPGraphQL
High7.5 - CVE-2021-47959
WordPress Plugin WPGraphQL 1.3.5 Denial of Service
Wpgraphql · WPGraphQL
High8.7 - CVE-2025-68604
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
WPGraphQL · WPGraphQL
Medium5.4 - CVE-2023-23684
WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
WPGraphQL · WPGraphQL
Medium4.4