How many wpengine wpgraphql CVEs are in CISA KEV?

None of wpengine wpgraphql's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wpengine wpgraphql are affected?

3 distinct wpengine wpgraphql versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wpengine wpgraphql CVEs?

wpengine wpgraphql's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical wpengine wpgraphql vulnerabilities are there?

wpengine wpgraphql has 2 critical and 0 high-severity CVEs.

What is the average severity of wpengine wpgraphql CVEs?

The average CVSS base score across wpengine wpgraphql's scored CVEs is 7.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wpengine

5 CVEs

wpengine wpgraphql Vulnerabilities

Name: wpengine wpgraphql vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wpgraphql by wpengine.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

7.2

Avg CVSS

2019–2024

Last updated January 16, 2024

Overview

wpengine wpgraphql has 5 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpengine wpgraphql, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wpengine wpgraphql's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High0

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpengine wpgraphql's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of wpengine wpgraphql's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every wpengine wpgraphql version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

0.2.3 <= v <= 0.2.33 CVEs
<= 0.12.31 CVE
<= 1.14.51 CVE

Find a version

5 CVEs

Sort

Medium vulnerability · 2024-01-16
CVE-2022-1563
Public exploit
Patch
Medium · CVSS 5.3
EPSS 0.7% (50th pct)2024-01-16
WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2023-23684
Patch
CWE-918
Medium · CVSS 6.5
EPSS 0.4% (37th pct)2023-11-13
Medium vulnerability · 2019-06-10
CVE-2019-9881
Public exploit
Patch
Medium · CVSS 5.3
EPSS 18.8% (97th pct)2019-06-10
Critical vulnerability · 2019-06-10
CVE-2019-9880
Public exploit
Patch
Critical · CVSS 9.1
EPSS 34.8% (98th pct)2019-06-10
Critical vulnerability · 2019-06-10
CVE-2019-9879
Public exploit
Patch
Critical · CVSS 9.8
EPSS 46.6% (99th pct)2019-06-10

Common weakness types

The CWE weakness categories most often found in wpengine wpgraphql CVEs. Follow any weakness for its full explanation.

CWE-918Server-Side Request Forgery (SSRF)1 CVE

Disclosure activity by year

How many wpengine wpgraphql CVEs were published each year.

2019

3

2023

1

2024

1

Other wpengine products

Browse vulnerabilities for other products by wpengine.

Advanced Custom Fields PRO8 CVEs Advanced Custom Fields6 CVEs advanced_custom_field_pro3 CVEs Advanced Custom Fields (ACF®)3 CVEs Database Backup for WordPress3 CVEs genesis blocks3 CVEs Gutenberg Blocks – ACF Blocks Suite2 CVEs Advanced Custom Fields (ACF)1 CVEs

All wpengine vulnerabilities

Frequently asked questions

Common questions about wpengine wpgraphql vulnerabilities.

How many CVEs does wpengine wpgraphql have?: wpengine wpgraphql has 5 published CVE records since 2019.
How many wpengine wpgraphql CVEs are in CISA KEV?: None of wpengine wpgraphql's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpengine wpgraphql vulnerabilities?: Yes — 4 of wpengine wpgraphql's CVEs have a known public exploit.
Which versions of wpengine wpgraphql are affected?: 3 distinct wpengine wpgraphql versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpengine wpgraphql CVEs?: wpengine wpgraphql's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical wpengine wpgraphql vulnerabilities are there?: wpengine wpgraphql has 2 critical and 0 high-severity CVEs.
What is the average severity of wpengine wpgraphql CVEs?: The average CVSS base score across wpengine wpgraphql's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpengine wpgraphql vulnerabilities

Monitor new wpengine wpgraphql vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing