Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

wp-graphql — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in wp-graphql, with AI-generated Chinese analysis, references, and POCs.

Vendor: wp-graphql

CVE ID Title CVSS Severity Published
CVE-2026-54768 WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design) CWE-204 6.9 Medium 2026-07-31
CVE-2026-33290 WPGraphQL Repo's updateComment allows low-privileged authenticated users to change comment moderation status (comment_approved) without moderate_comments permission CWE-862 4.3 Medium 2026-03-23
CVE-2026-27938 WPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release Workflow CWE-78 7.7 High 2026-02-26

All 3 known CVE vulnerabilities affecting wp-graphql with full Chinese analysis, references, and POCs where available.