5.3
Medium
CVE-2022-1563 The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a…
Description
The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| wp-graphql-woocommerce 0.12 | earliest → < 0.12.4 | 0.12.4 |