Wpgraphql (Wpengine) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 198 known versions, newest CVE from 2026-05-15. Vendor: Wpengine.

CVEs of Wpgraphql

• CVE-2021-47959 - CVSS 8.7 (high), 2026-05-15: WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending…
• CVE-2022-1563 - CVSS 5.3 (medium), 2024-01-16: The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via…
• CVE-2023-23684 - CVSS 6.5 (medium), 2023-11-13: Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.
• CVE-2019-9881 - CVSS 5.3 (medium), 2019-06-10: The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment'…
• CVE-2019-9880 - CVSS 9.1 (critical), 2019-06-10: An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to…
• CVE-2019-9879 - CVSS 9.8 (critical), 2019-06-10: The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed.…