WordPress Wpgraphql Vulnerabilities

Wordpress Wpgraphql vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

7 May 2026

Cross-Site Request Forgery Vulnerability in WPGraphQL by WordPress
CVE-2025-68604
WordPressWPgraphql5.4MEDIUM

13 November 2023

WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2023-23684
WordPressWPgraphql4.4MEDIUM

9 May 2022

WP-GraphQL < 0.3.5 - Improper Access Control
CVE-2019-25060
WordpressWPgraphql5.3MEDIUM

10 June 2019

Remote User Registration Vulnerability in WPGraphQL Plugin for WordPress
CVE-2019-9879
WordpressWPgraphql👾🟡EPSS 76%9.8CRITICAL
Information Disclosure Vulnerability in WPGraphQL Plugin for WordPress
CVE-2019-9880
WordpressWPgraphql👾🟡EPSS 73%9.1CRITICAL
Authentication Bypass in WPGraphQL Plugin for WordPress
CVE-2019-9881
WordpressWPgraphql👾🟡EPSS 30%5.3MEDIUM