CVE-2019-9879

概要

参考情報

• packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html · Exploit
• pentestpartners/snippets · Exploit
• wp-graphql/wp-graphql release v0.3.0 · Release Notes
• wpvulndb.com/vulnerabilities/9282 · Vendor Advisory
• pentestpartners.com/security-blog/pwning-wordpress-graphql · Exploit

wpgraphql のその他の脆弱性

• CVE-2022-1563中 5.3The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes a…
• CVE-2023-23684中 6.5Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.
• CVE-2019-9881中 5.3The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even wh…
• CVE-2019-9880緊急 9.1An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticat…