WordPress Wpgraphql Vulnerabilities

Wordpress Wpgraphql vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

13 October 2026

Missing Authorization Vulnerability in WPGraphQL by WordPress
CVE-2026-109703
WordPressWPgraphql5.3MEDIUM

19 September 2026

Unauthorized Query Submission in WPGraphQL Smart Cache Plugin by WordPress
CVE-2026-92099
WordPressWPgraphql Smart Cache👾🟡6.5MEDIUM

15 June 2026

Unauthenticated SQL Injection in WPGraphQL by WordPress
CVE-2026-40762
WordPressWPgraphql7.5HIGH

15 May 2026

Denial of Service Vulnerability in WPGraphQL Plugin for WordPress
CVE-2021-47959
WordPressWPgraphql👾🟡8.7HIGH

7 May 2026

Cross-Site Request Forgery Vulnerability in WPGraphQL by WordPress
CVE-2025-68604
WordPressWPgraphql5.4MEDIUM

13 November 2023

WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2023-23684
WordPressWPgraphql4.4MEDIUM

9 May 2022

WP-GraphQL < 0.3.5 - Improper Access Control
CVE-2019-25060
WordpressWPgraphql5.3MEDIUM

10 June 2019