CVE-2019-9881

Published June 10th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECTS

Description

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.

wp-graphql/wp-graphql

:rocket: GraphQL API for WordPress

GitHub

3.78K

pentestpartners/snippets

Random Code Snippets

GitHub