Description
Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.
This issue affects WPGraphQL: from n/a through 2.5.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPGraphQL | WPGraphQL | ≤ 2.5.3 | — |
Medium · 5.4
CVE-2025-68604
EUVD-2025-209718GHSA-655c-g9rr-96vv
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
Published May 7, 2026 · Updated May 7, 2026 · Assigned by Patchstack