{"action":"Upgrade wp-graphql/wp-graphql to 0.3.5 or later.","affected":[{"fixed":"0.3.5","introduced":"0"}],"component":"wp-graphql/wp-graphql","cve_ids":["CVE-2019-25060"],"ecosystem":"Packagist","epss":0.01827,"exploited":false,"fixed_versions":["0.3.5"],"ghsa_id":"GHSA-w3xg-7q6m-3xwp","id":"tcs_01M5KF9Q8NTH5FF3ZFKCPMDCM8","modified_at":"2023-11-08T04:01:32.798019Z","published_at":"2022-05-10T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-w3xg-7q6m-3xwp","https://nvd.nist.gov/vuln/detail/CVE-2019-25060","https://github.com/wp-graphql/wp-graphql/pull/900","https://github.com/wp-graphql/wp-graphql","https://wpscan.com/vulnerability/393be73a-f8dc-462f-8670-f20ab89421fc"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w3xg-7q6m-3xwp","url":"https://osv.dev/vulnerability/GHSA-w3xg-7q6m-3xwp"}],"summary":"Improper Access Control in wp-graphql"}