Is CVE-2026-109703 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-109703?

CVE-2026-109703 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-109703

Description

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1.