WPGraphQL Smart Cache vulnerabilities

Latest WPGraphQL Smart Cache CVEs

Newest publication first

1. CVE-2026-119699 WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS

   Published 2026-10-30

   Medium·CVSS 6.9 EPSS 0.45%

   WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to persist unlimited query documents via the Automatic Persisted Query handler. Attackers can send distinct queries with matching SHA-256 queryId v...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.