| Package | Affected versions | Patched versions |
|---|---|---|
| wpgraphql | = 0.2.3 |
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free