Plugin icon

WPGraphQL

wp-graphql

Vulnerabilities:

7

Last Updated:

May 8, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-05-07
Title
WPGraphQL < 2.5.4 - Cross-Site Request Forgery
Fixed in
Fixed in 2.5.4
CVSS
4.3 (medium)
Published
2026-04-21
Title
WPGraphQL < 2.11.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.11.1
CVSS
7.5 (high)
Published
2026-03-24
Title
WPGraphQL < 2.10 - Missing Authorization
Fixed in
Fixed in 2.10
CVSS
4.3 (medium)
Published
2023-06-26
Title
WPGraphQL < 1.14.6 - Editor+ SSRF
Fixed in
Fixed in 1.14.6
CVSS
4.4 (medium)
Published
2021-04-27
Title
WPGraphQL < 1.3.6 - Denial of Service
Fixed in
Fixed in 1.3.6
CVSS
7.5 (high)
Published
2019-07-10
Title
WP-GraphQL < 0.3.5 - Improper Access Control
Fixed in
Fixed in 0.3.5
CVSS
5.3 (medium)
Published
2019-05-08
Title
WPGraphQL < 0.3.0 - Multiple Vulnerabilities
Fixed in
Fixed in 0.3.0
CVSS
9.8 (critical)