S4E

WPGraphQL 0.2.3 - User Creation

Short Info


Level

Critical

Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

10 seconds

Time Interval

11 days 3 hours

Scan only one

Domain, Subdomain, IPv4

Toolbox

The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.


References:
Get started to protecting your digital assets