Security Advisory
CVE-2019-9880
9.1
CRITICAL
Vulnerability Description
An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.
Published Date
June 10, 2019
Official Source
NIST NVD Advisory