Skip to content
Threat Feed

Product

WPGraphQL 1.3.5

1 brief RSS
medium threat

CVE-2021-47959: WPGraphQL Plugin Denial of Service via Batched Queries

The WordPress Plugin WPGraphQL version 1.3.5 is vulnerable to a denial-of-service attack where unauthenticated attackers can exhaust server resources by sending batched GraphQL queries with duplicated fields, potentially causing server out-of-memory conditions and MySQL connection errors.

WPGraphQL 1.3.5 denial-of-service wordpress graphql
2r 1t 1c