Description
Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPGraphQL | WPGraphQL | < 2.11.1 | 2.11.1 |
High · 7.5
CVE-2026-40762
EUVD-2026-36975GHSA-4x56-83j8-4m8f
WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack