Vulnerabilities and Security Researches

WPGraphQL, CVE-2019-9880

CVE, Research URL: CVE-2019-9880
Home page URL: Security reports for WPGraphQL
Application: WPGraphQL
Published on: Jun 10, 2019
Research Description: An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.
Affected versions: max 0.3.0.
Status: vulnerable