Skip to content
OpenAdvisories

Vendor

WPGraphQL

9 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability

    Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.

  • High 7.5

    WordPress Plugin WPGraphQL 1.3.5 Denial of Service

    WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batched GraphQL queries with duplicated fields. Attackers can send POST requests to the GraphQL endpoint w…