Mageplaza Magefan Blog vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mageplaza Magefan Blog: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mageplaza:magefan_blog

CVE-2026-79323 High · 7.5 CWE-200 Sep 9, 2026

Exposure of Sensitive Information in Mageplaza Magefan Blog

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql.