Log in Get started
Vulnerability database / Plugins / wp-graphql

Wp Graphql

WordPress plugin · wp-graphql · WordPress.org ↗
0
Critical
0
High
1
Known total
1
Unfixed
Running Wp Graphql on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.
Scan a site Monitor my sites →
SeverityVulnerabilityAffectedFixed inCVEPublished
MEDIUM
CVSS 6.9
 WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)
CVE.org
 < 2.15.1 unfixed CVE-2026-54768 Aug 1, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.