CVE-2019-9881
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when ‘allow comment’ is disabled.
Date published : 2019-06-10
https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0