WPGraphQL

wp-graphql · plugin

Known security vulnerabilities for WPGraphQL. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Jun 15, 2026

Vulnerabilities

CVE-2026-40762→ 2.11.1
WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability
High 7.5
CVE-2023-23684
WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
Medium 6.5
CVE-2025-68604
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
Medium 5.4