Known vulnerabilities in WPGraphQL

Vendor: WPGraphQL
Software: WPGraphQL
Software CPE: cpe:2.3:a:wpgraphql:wp-graphql:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WPGraphQL WPGraphQL is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128189 - Missing Authorization
CVE-2026-33290
CWE-862 Low
No
No
2.10.0 27.04.2026 SB20260427157
#VU123329 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-27938
CWE-78 Medium
No
No
2.8.0 27.02.2026 SB2026022731
#VU77915 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
1.14.6 04.07.2023 SB2023070402
#VU128188 - Server-Side Request Forgery (SSRF)
CVE-2023-23684
CWE-918 Low
No
No
1.14.6 30.06.2023 SB2023070402
#VU18794 - Permissions, Privileges, and Access Controls
CVE-2019-9881
CWE-264 Medium
No
No
0.3.0 13.06.2019 SB2019061802
#VU18793 - Improper Access Control
CVE-2019-9880
CWE-284 Medium
No
No
0.3.0 13.06.2019 SB2019061802
#VU18792 - Improper Access Control
CVE-2019-9879
CWE-284 High
No
No
0.3.0 13.06.2019 SB2019061802