Known vulnerabilities in WPGraphQL
Vendor:
WPGraphQL
Software:
WPGraphQL
Software CPE:
cpe:2.3:a:wpgraphql:wp-graphql:*:*:*:*:*:*:*:*
Website:
https://www.wpgraphql.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.19.0
2.18.0
2.17.0
2.16.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.0
2.12.0
2.11.2
2.11.1
2.11.0
2.10.1
2.10.0
2.9.1
2.9.0
2.8.0
2.7.0
2.6.0
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.3.8
2.3.6
2.3.3
2.3.0
2.1.1
2.2.0
2.1.0
2.0.0
1.32.1
1.32.0
1.31.1
1.31.0
1.30.0
1.29.3
1.29.2
1.29.1
1.29.0
1.28.1
1.28.0
1.27.2
1.27.1
1.27.0
1.26.0
1.25.0
1.24.0
1.23.0
1.22.1
1.22.0
1.21.0
1.20.0
1.19.0
1.18.2
1.18.1
1.18.0
1.1.8.0
1.17.0
1.16.0
1.15.0
1.14.10
1.14.9
1.14.8
1.14.7
1.14.6
1.14.5
1.14.4
1.14.3
1.14.2
1.14.1
1.14.0
1.13.10
1.13.9
1.13.8
1.13.7
1.13.6
1.13.5
1.13.4
1.13.3
1.13.2
1.13.1
1.13.0
1.12.3
1.12.2
1.12.1
1.12.0
1.11.3
1.11.2
1.11.1
1.11.0
1.10.0
1.9.1
1.9.0
1.8.7
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.2
1.7.1
1.7.0
1.6.12
1.6.11
1.6.10
1.6.9
1.6.8
1.6.7
1.6.6
1.6.5
1.6.4
1.6.3
1.6.2
1.5.9
1.6.1
1.4.7
1.5.6
1.5.7
1.5.8
1.6.0
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.2
1.4.3
1.4.1
1.4.0
1.3.10
1.3.9
1.3.8
1.3.7
1.3.6
1.3.5
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.2.6
1.2.5
1.2.3
1.2.4
1.2.2
1.2.1
1.2.0
1.1.6
1.1.7
1.1.8
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
2.0.3
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0
0.15.5
0.15.6
0.15.4
0.15.3
0.15.2
0.15.1
0.15.0
0.14.0
0.13.3
0.13.2
0.13.1
0.13.0
0.12.3
0.12.2
0.12.1
0.12.0
0.11.0
0.10.3
0.10.2
0.10.1
0.10.0
0.9.1
0.9.0
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.1
0.7.0
0.6.3
0.6.2
0.6.1
0.6.0
0.5.1
0.5.0
0.4.3
0.4.2
0.4.1
0.4.0
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.01
0.3.0
0.2.3
0.2.2
0.2.1
0.2.0
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
0.0.34
0.0.33
0.0.32
0.0.31
0.0.30
0.0.29
0.0.28
0.0.27
0.0.26
0.0.25
0.0.24
0.0.23
0.0.22
0.0.21
0.0.20
0.0.19
0.0.18
0.0.17
0.0.16
0.0.15
0.0.14
0.0.13
0.0.12
0.0.11
0.0.10
0.0.9
0.0.8
0.0.7
0.0.6
0.0.5
0.0.3
0.0.2
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128189 - Missing Authorization CVE-2026-33290 |
CWE-862 | Low | 2.10.0 | 27.04.2026 |
SB20260427157 |
||
| #VU123329 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-27938 |
CWE-78 | Medium | 2.8.0 | 27.02.2026 |
SB2026022731 |
||
| #VU77915 - Server-Side Request Forgery (SSRF) |
CWE-918 | Medium | 1.14.6 | 04.07.2023 |
SB2023070402 |
||
| #VU128188 - Server-Side Request Forgery (SSRF) CVE-2023-23684 |
CWE-918 | Low | 1.14.6 | 30.06.2023 |
SB2023070402 |
||
| #VU18794 - Permissions, Privileges, and Access Controls CVE-2019-9881 |
CWE-264 | Medium | 0.3.0 | 13.06.2019 |
SB2019061802 |
||
| #VU18793 - Improper Access Control CVE-2019-9880 |
CWE-284 | Medium | 0.3.0 | 13.06.2019 |
SB2019061802 |
||
| #VU18792 - Improper Access Control CVE-2019-9879 |
CWE-284 | High | 0.3.0 | 13.06.2019 |
SB2019061802 |