Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-1563

WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes Disclosure

Description

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown wp-graphql-woocommerce

Default version status: unaffected

  • 0 to < 0.12.4affected

References