Description
Your web application's GraphQL implementation accepts non-JSON queries over POST requests, increasing the risk of Cross-Site Request Forgery (CSRF) attacks. The request was sent with Content-Type application/x-www-form-urlencoded and succeeded.
Remediation
Restrict GraphQL queries to JSON-based POST requests to limit the CSRF attack surface.
References
Related Vulnerabilities
WordPress Plugin Podlove Podcast Publisher Cross-Site Request Forgery (3.8.3)
WordPress Plugin Simple Share Buttons Adder Multiple Vulnerabilities (4.4)
WordPress Plugin WordPress Photo Gallery-Image Gallery Cross-Site Request Forgery (1.0.6)
WordPress Plugin WordPress Books Gallery Cross-Site Request Forgery (4.4.8)
WordPress Plugin Youtube Feeder Cross-Site Request Forgery (2.0.1)