60
CVE-2019-9881
- CVSS 3.0
- 5.3 medium
- EPSS
- 18%p97
- Published
- ·
- Modified
Description · NVD
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
- Vendors
- wpengine
- Products
- wpgraphql
- Ecosystems
- WordPress
- Weakness
- CWE-306
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N