Vulnerabilities and Security Researches

WPGraphQL, CVE-2019-9881

CVE, Research URL: CVE-2019-9881
Home page URL: Security reports for WPGraphQL
Application: WPGraphQL
Published on: Jun 10, 2019
Research Description: The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
Affected versions: max 0.3.0.
Status: vulnerable