Vendor

    WPGraphQL

    10 known vulnerabilities in products by WPGraphQL, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WPGraphQL
    MediumCVE-2019-25060

    WP-GraphQL < 0.3.5 - Improper Access Control

    		5.3
    HighCVE-2021-47959

    WordPress Plugin WPGraphQL 1.3.5 Denial of Service

    		7.5
    MediumCVE-2026-119702

    WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation

    		6.5
    MediumCVE-2026-119700

    WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

    		5.3
    MediumCVE-2026-119699

    WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS

    		5.3
    MediumCVE-2026-119701

    WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations

    		5.3
    HighCVE-2026-40762

    WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability

    		7.5
    MediumCVE-2026-109703

    WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2025-68604

    WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability

    		5.4
    MediumCVE-2023-23684

    WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)

    also in 1 other product

    		4.4

    Products

    Products by WPGraphQL
    WPGraphQL90