Network Attack Trends: Internet of Threats (November 2020
60
CVE-2019-9881
PoC ×3—CVSS 3.0
5.3 medium
EPSS
19%p97
Published
()
Modified
Description
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
- Vendors
- wpengine
- Products
- wpgraphql
- Ecosystems
- WordPress
- Weakness
- CWE-306
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N