8 CVEs
wp-graphql Vulnerabilities
CVE security advisories and vulnerability history for wp-graphql.
8
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
6
Public exploits
With known exploit
5.4
Avg CVSS
2019–2026
Overview
wp-graphql has 8 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 5.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting wp-graphql products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Severity and exploitation
How the CVSS severity of wp-graphql's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.