Vulnerabilities and Security Researches

WPGraphQL, CVE-2019-9879

CVE, Research URL: CVE-2019-9879
Home page URL: Security reports for WPGraphQL
Application: WPGraphQL
Published on: Jun 10, 2019
Research Description: The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.
Affected versions: max 0.3.0.
Status: vulnerable