medium5.3
CVE-2022-1563
The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via Graph…
Impact
The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpengine | Wpgraphql | through 0.12.3 |