CVE Catalog
CVE-2026-40762
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
WPGraphQL versions below 2.11.1 are vulnerable to unauthenticated SQL Injection.
Risk Assessment
An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.
Recommendation
It is recommended to update WPGraphQL to version 2.11.1 or later to mitigate this vulnerability.
Other vulnerabilities in WPGraphQL
Original NVD description (English source)
Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.