WWPGraphQL

Products

Exploited and recent CVEs

• CVE-2026-119702 Medium 6.5 WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation 0.4%
• CVE-2026-119701 Medium 5.3 WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations 0.6%
• CVE-2026-119700 Medium 5.3 WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations 0.4%
• CVE-2026-119699 Medium 5.3 WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS 0.5%
• CVE-2026-109703 Medium 5.3 WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability 0.2%
• CVE-2026-40762 High 7.5 WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability 0.3%
• CVE-2021-47959 High 7.5 WordPress Plugin WPGraphQL 1.3.5 Denial of Service 0.5%
• CVE-2025-68604 Medium 5.4 WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability <0.1%
• CVE-2023-23684 Medium 4.4 WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF) 0.4%