The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view