wpengine

Records33All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

wpengine records in CISA KEV

No wpengine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wpgraphql 5 records HIGH Genesis Blocks 3 records HIGH Advanced Custom Fields 1 record LOW Better Search Replace 1 record CRITICAL Php Compatibility Checker 1 record LOW

Records

5 records in Wpgraphql · all components

TI-2019-07258 CVE-2019-9879 · GHSA-723x-w2r7-8wg2

The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user…

HIGH 72

The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.45692 Published 2019-06-10 No fix listed CWE-306

TI-2019-07259 CVE-2019-9880 · GHSA-hmw5-56mv-q94w

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress.

HIGH 71

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.34835 Published 2019-06-10 No fix listed CWE-306

TI-2022-01434 CVE-2022-1563 · GHSA-c5j7-mp6j-v4wc

WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes Disclosure

MEDIUM 63

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00724 Published 2024-01-16 Fixed in 0.12.4

TI-2019-07260 CVE-2019-9881 · GHSA-hhwc-x32h-p6qg

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows…

MEDIUM 42

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.18351 Published 2019-06-10 No fix listed CWE-306

TI-2023-09498 CVE-2023-23684 · GHSA-cfh4-7wq9-6pgg

WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)

LOW 29

Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0045 Published 2023-11-13 Fixed in 1.14.6 CWE-918

Open these records in search →

Critical	5
High	9
Medium	19
Low	0
No CVSS	0