CVE-2026-119702 | WPGraphQL GraphQL Plugin up to 2.24.0 Mutation createComment improper authorization

October 30, 2026 Yanac

A vulnerability classified as critical was found in WPGraphQL GraphQL Plugin up to 2.24.0. This vulnerability affects the function createComment of the component Mutation. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-119702. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More