The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wpengine wpgraphql 0.2.3 |