Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-23684 EUVD-2023-1773GHSA-cfh4-7wq9-6pgg

WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)

Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPGraphQL Product: WPGraphQL Package: wp-graphql/wp-graphql Ecosystem: Packagist

Description

Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.

Affected products

VendorProductAffectedFixed
WPGraphQL WPGraphQL ≤ 1.14.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist wp-graphql/wp-graphql < 1.14.6 1.14.6 GHSA-cfh4-7wq9-6pgg

References