CRITICAL

CVE-2019-9879

CVSS v3

9.8

CRITICAL

EPSS Score

77.6%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.

Technical details

Published
6/10/2019
Exploit-DB
EDB-46886

Frequently asked questions

What is CVE-2019-9879?

The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.

Is CVE-2019-9879 actively exploited?

Active exploitation of CVE-2019-9879 has not been confirmed. The EPSS score is 77.6%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-9879?

CVE-2019-9879 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2019-9879 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.