Filtered by vendor Wpengine Subscriptions
Filtered by product Wpgraphql Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-23684 1 Wpengine 1 Wpgraphql 2024-11-21 4.4 Medium
Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.
CVE-2022-1563 1 Wpengine 1 Wpgraphql 2024-11-21 5.3 Medium
The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.
CVE-2019-9881 1 Wpengine 1 Wpgraphql 2024-11-21 N/A
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
CVE-2019-9880 1 Wpengine 1 Wpgraphql 2024-11-21 N/A
An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.
CVE-2019-9879 1 Wpengine 1 Wpgraphql 2024-11-21 N/A
The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.