CVE-2019-9880

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.

CVSS v3.0 NVD

9.1 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v2.0 NVD

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

35.64% chance of exploitation in the next 30 days, 98th percentile

Nuclei

critical · CWE-306

Published

2019-06-10

Updated

2024-11-15

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypa…
• https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9880.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46886

Security advisories

• https://wpvulndb.com/vulnerabilities/9282
• pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py
• wp-graphql/wp-graphql/releases/tag/v0.3.0
• https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql

References

• CVE Record
• NVD entry