CVE-2019-9881

Publication date

2019-06-10 17:37:26

Family

mitre

State

PUBLISHED

Description

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when allow comment is disabled.