Medium severity5.3NVD Advisory· Published Jan 16, 2024· Updated Jun 17, 2026

CVE-2022-1563

Description

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpengine/Wpgraphql
cpe:2.3:a:wpengine:wpgraphql:*:*:*:*:*:wordpress:*:*
Range: <=0.12.3
WordPress/WooCommercecpe-rescue
Package: https://wordpress.org/plugins/woocommerce
WordPress/WPGraphQL WooCommercellm-fuzzy
Range: <0.12.4

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/19138092-50d3-4d63-97c5-aa8e1ce39456/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000