Wpgraphql WPGraphQL vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20267

Newest CVEs

• CVE-2026-119702

  WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation

  WPGraphQL · WPGraphQL

  Medium6.9
• CVE-2026-119701

  WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations

  WPGraphQL · WPGraphQL

  Medium6.9
• CVE-2026-119700

  WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

  WPGraphQL · WPGraphQL

  Medium6.9
• CVE-2026-109703

  WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

  WPGraphQL · WPGraphQL

  Medium5.3
• CVE-2026-40762

  WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability

  WPGraphQL · WPGraphQL

  High7.5
• CVE-2021-47959

  WordPress Plugin WPGraphQL 1.3.5 Denial of Service

  Wpgraphql · WPGraphQL

  High8.7
• CVE-2025-68604

  WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability

  WPGraphQL · WPGraphQL

  Medium5.4
• CVE-2023-23684

  WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)

  WPGraphQL · WPGraphQL

  Medium4.4