Description
Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
Low
Affected products
- WPGraphQL / WPGraphQLn/a – 2.11.1