[ Vendor · 1 CVEs ]
wp-graphql
CVEs affecting wp-graphql published in the last 30 days, plus any wp-graphql CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-88974 | 23 Sep 2026 | CVSS 5.4 | WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePostWPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjectUpdate.php checks only the… |