| 2026-10-17 |
WPSEC-2026-1157 |
WPGraphQL <= 2.24.1 - Unauthenticated Sensitive Information Exposure via User, Post and Term Mutation Error Messages |
Medium 5.3 |
2.24.2 |
| 2026-10-17 |
WPSEC-2026-1156 |
WPGraphQL <= 2.24.1 - Authenticated (Author+) Server-Side Request Forgery via createMediaItem Remote URL |
Medium 4.9 |
2.24.2 |
| 2026-10-17 |
WPSEC-2026-1155 |
WPGraphQL <= 2.24.1 - Authenticated (Subscriber+) Sensitive Information Exposure via updateComment and deleteComment Error Messages |
Medium 4.3 |
2.24.2 |
| 2026-10-16 |
WPSEC-2026-1079 |
WPGraphQL <= 2.24.0 - Authenticated (Contributor+) Sensitive Information Exposure via Trashed Posts |
Medium 4.3 |
2.24.1 |
| 2026-10-16 |
WPSEC-2026-1078 |
WPGraphQL <= 2.24.0 - Authenticated (Author+) Server-Side Request Forgery via 'filePath' Parameter |
Medium 4.9 |
2.24.1 |
| 2026-10-16 |
WPSEC-2026-1077 |
WPGraphQL <= 2.24.0 - Unauthenticated Missing Authorization to Comment Creation on Restricted Posts |
Medium 5.3 |
2.24.1 |
| 2026-10-16 |
WPSEC-2026-1076 |
WPGraphQL <= 2.24.0 - Authenticated (Subscriber+) Missing Authorization to Comment Metadata Modification and Moderation Bypass via updateComment |
Medium 4.3 |
2.24.1 |
