Security Advisory
CVE-2019-9881
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when allow comment is disabled.