WPGraphQL · Version history
WPGraphQL changelog and version history
- Latest version
- 2.26.2
- Nov 5, 2026 (4 days ago)
- Releases
- 186
- since 2020
- In the last year
- 39
- about one every 9 days
- Tested up to
- WordPress 7.0.8
- PHP 7.4 or later
Releases each year
- 20209 releases
- 202153 releases
- 202231 releases
- 202321 releases
- 202417 releases
- 202519 releases
- 202636 releases
202636 releases
WPGraphQL 2.26.2Latest
- Bug Fixes
- return no results for malformed connection cursors (#4613)
WPGraphQL 2.26.1
- Bug Fixes
- deps-dev: bump the wp-graphql-composer-dev-minor-patch group in /plugins/wp-graphql with 2 updates (#4630)
- deps: bump webonyx/graphql-php from 15.38.1 to 15.39.0 in /plugins/wp-graphql (#4633)
- limit comment connection filters and counts to comments the requester can see (#4642)
- require manage_options to read settings exposed only through the REST API (#4641)
WPGraphQL 2.26.0
- New Features
- add Site Health recommendations for WPGraphQL security settings (#4536)
- add static to_global_id() helper to models (#4586)
- deps: bump the npm-prod-minor-patch group with 6 updates (#4592)
- let sites opt out of usage tracking from settings (#4508)
- Bug Fixes
- deps-dev: bump symfony/yaml from 5.4.53 to 5.4.54 in /plugins/wp-graphql (#4599)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 4 updates (#4601)
- deps-dev: bump the npm-dev-minor-patch group with 8 updates (#4591)
- show a readable error when installing or activating an extension fails (#4568)
WPGraphQL 2.25.0
- New Features
- deps: bump the npm-prod-minor-patch group across 1 directory with 13 updates (#4490)
- Bug Fixes
- deps-dev: bump the npm-dev-minor-patch group with 3 updates (#4496)
- deps-dev: bump the npm-dev-minor-patch group, with the @wordpress/env patch regenerated (#4478)
- deps-dev: bump the wp-graphql-composer-dev-minor-patch group across 1 directory with 2 updates (#4392)
- deps: bump the wp-graphql-composer-patch group across 1 directory with 2 updates (#4502)
- deps: bump webonyx/graphql-php from 15.37.2 to 15.37.3 in /plugins/wp-graphql in the wp-graphql-composer-patch group (#4432)
- deps: bump webonyx/graphql-php from 15.37.3 to 15.38.0 in /plugins/wp-graphql (#4492)
- graphql: run WordPress’ moderation filter on edited comments (#4476)
WPGraphQL 2.24.2
- Bug Fixes
- media: reject the local-use NAT64 prefix, and fail closed on a failed AAAA lookup (#4460)
- mutations: check the capability before looking up the target, in four more mutations (#4461)
- mutations: keep a comment’s stored byline when only its content is edited (#4458)
- mutations: stop comment mutations telling logged-in callers which comment IDs exist (#4459)
- release: stop release-please rewriting changelog entries that name its annotations (#4450)
WPGraphQL 2.24.1
- Bug Fixes
- media: reject internal IPv6 addresses written with a dotted-quad tail (#4451)
- media: reject IPv6 forms that carry an internal IPv4 address (GHSA-3j5r-mp5g-4wrw) (#4446)
- models: require edit_others_posts to read someone else’s trashed content (GHSA-rq5q-mc8v-w8pq) (#4440)
- mutations: check the capability before looking up the target (GHSA-r7m4-3v6c-3435) (#4443)
- mutations: check the target post before creating a comment (GHSA-4vgv-vvxr-9fh9) (#4441)
- mutations: limit password reset emails to one per request (GHSA-f5f8-v768-93c8) (#4444)
- mutations: restrict updateComment to content for non-moderators (GHSA-cf67-w9ww-p68v) (#4442)
- mutations: stop debug output saying whether an account exists (GHSA-6xw5-35v5-2886) (#4445)
WPGraphQL 2.24.0
- New Features
- add a settings review for security-related settings (#4342)
- add publiclyQueryable to Taxonomy, and correct the public description (#4425)
- turn on query depth limiting for new installs and add a max depth filter (#4341)
- Bug Fixes
- ide: show WPGraphQL admin notices above the IDE instead of over it (#4340)
- report public: false for non-public post types (#4430)
- report public: false for non-public taxonomies (#4414)
- show admin notices above the legacy GraphiQL IDE and on the Extensions screen (#4339)
- stop hiding a taxonomy while serving every term inside it (#4426)
WPGraphQL 2.23.1
- Security
- tighten media item update authorization: updateMediaItem now verifies that the requesting user can edit the targeted media item, and its new parent, before applying changes. Previously, users with the Author or Contributor role could reassign, and then delete, media items owned by other users. See…
WPGraphQL 2.23.0
- New Features
- deps: bump @wordpress/components from 38.0.0 to 39.0.0 (#4330)
- deps: bump the npm-prod-minor-patch group across 1 directory with 11 updates (#4294)
- Bug Fixes
- deps-dev: bump @wordpress/jest-preset-default from 13.0.0 to 14.0.0 (#4328)
- deps-dev: bump composer/composer from 2.2.29 to 2.2.30 in /plugins/wp-graphql (#4282)
- deps-dev: bump phpstan/phpstan from 2.2.10 to 2.2.13 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#4323)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 11 updates (#4290)
- deps-dev: bump the npm-dev-minor-patch group with 4 updates (#4326)
- extensions page detects installed plugins by file and restores the card grid on WordPress 7 (#4302)
WPGraphQL 2.22.3
- Bug Fixes
- security: guard root plugin files against direct file access (#4272)
- security: validate createMediaItem filePath against the resolved host address (GHSA-p8rh)
WPGraphQL 2.22.2
- Bug Fixes
- security: do not invoke bare callable-string field definitions in Model (#4270)
- security: enforce object-level and publish capabilities in updatePost (GHSA-5mmc)
WPGraphQL 2.22.1
- Bug Fixes
- validate user roles before assignment in user mutations (GHSA-66rg)
WPGraphQL 2.22.0
- New Features
- deps: bump @wordpress/components from 37.0.0 to 38.0.0 (#4260)
- deps: bump @wordpress/compose from 7.46.0 to 8.5.0 (#4262)
- deps: bump the npm-prod-minor-patch group across 1 directory with 5 updates (#4267)
- Bug Fixes
- deps-dev: bump the npm-dev-minor-patch group with 5 updates (#4257)
WPGraphQL 2.21.1
- Bug Fixes
- deps-dev: bump @testing-library/jest-dom from 6.9.1 to 7.0.0 (#4250)
- deps-dev: bump @wordpress/jest-preset-default from 12.51.0 to 13.0.0 (#4249)
- deps-dev: bump the wp-graphql-composer-dev-minor-patch group in /plugins/wp-graphql with 2 updates (#4242)
- return memoized model field values as data instead of re-invoking them (#4252)
WPGraphQL 2.21.0
- New Features
- add request-level preview context (X-GraphQL-Preview header / extensions.preview) (#3969)
- deps: bump @wordpress/components from 34.0.0 to 37.0.0 (#4204)
- deps: bump the npm-prod-minor-patch group across 1 directory with 5 updates (#4202)
- deps: bump the npm-prod-minor-patch group with 7 updates (#4218)
- preview ACF field values under the request-level preview context (#4222)
- Bug Fixes
- deps-dev: bump @typescript-eslint/eslint-plugin from 6.21.0 to 8.65.0 (#4220)
- deps-dev: bump lint-staged from 16.4.0 to 17.2.0 (#4221)
- deps-dev: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#4199)
- deps-dev: bump sort-package-json from 3.7.1 to 4.0.0 (#4219)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 12 updates (#4226)
- deps-dev: bump the npm-dev-minor-patch group with 5 updates (#4200)
- deps: bump webonyx/graphql-php from 15.37.1 to 15.37.2 in /plugins/wp-graphql in the wp-graphql-composer-patch group (#4215)
- point acf.wpgraphql.com links at the wpgraphql.com docs portal (#4251)
- remove WordPress internals from schema field descriptions (#4161)
WPGraphQL 2.20.0
- New Features
- deps: bump the npm-prod-minor-patch group across 1 directory with 2 updates (#4185)
- filter enqueued assets by handle (#4190)
- Bug Fixes
- accept enum names in contentType and taxonomy NAME lookups (#4174)
- deps-dev: bump @testing-library/react from 15.0.7 to 16.3.2 (#4187)
- deps-dev: bump guzzlehttp/guzzle from 7.15.1 to 7.15.3 in /plugins/wp-graphql (#4179)
- deps-dev: bump squizlabs/php_codesniffer from 3.13.5 to 3.13.6 in /plugins/wp-graphql (#4180)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 8 updates (#4192)
- deps: bump webonyx/graphql-php from 15.35.0 to 15.37.1 in /plugins/wp-graphql (#4181)
- let assign_terms holders assign existing terms by name in post mutations (#4003)
- resolve menu(idType: LOCATION) when given a MenuLocationEnum name (#4171)
WPGraphQL 2.19.0
- New Features
- deps: bump the npm-prod-minor-patch group across 1 directory with 8 updates (#4160)
- deps: bump the npm-prod-minor-patch group with 6 updates (#4121)
- Bug Fixes
- deps-dev: bump @babel/preset-react from 7.29.7 to 8.0.1 (#4123)
- deps-dev: bump @types/node from 22.19.21 to 26.0.1 (#4122)
- deps-dev: bump eslint-plugin-jest from 27.9.0 to 28.14.0 (#4141)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 11 updates (#4129)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 7 updates (#4154)
- deps-dev: bump the npm-dev-minor-patch group with 7 updates (#4120)
- deps-dev: bump the wp-graphql-composer-dev-minor-patch group across 1 directory with 3 updates (#4146)
- deps: bump webonyx/graphql-php from 15.34.0 to 15.35.0 in /plugins/wp-graphql (#4133)
- Performance Improvements
- parse the query AST once in QueryAnalyzer instead of three times (#4130)
WPGraphQL 2.18.0
- New Features
- add a template where arg (ContentTemplateEnum) to post connections (#4025)
- add isSticky where arg to post connections (#4002)
- deps: bump @wordpress/components from 27.6.0 to 34.0.0 (#4011)
- deps: bump @wordpress/i18n from 4.58.0 to 6.21.0 (#4038)
- deps: bump the npm-prod-minor-patch group across 1 directory with 10 updates (#4055)
- deps: bump the npm-prod-minor-patch group with 4 updates (#4010)
- deps: bump the npm-prod-minor-patch group with 4 updates (#4091)
- expose the Site Address as generalSettings.homeUrl (#4021)
- generate developer reference docs for hooks, functions, and recipes (#4031)
- settings: make setting groups Nodes with an id and Node interface (#4081)
- settings: route value resolution through the SettingGroup model and add the graphql_purge_all config key (#4082)
- settings: seed in-memory shims (home, permalink) and consolidate field-name derivation (#4078)
- settings: support per-entry config in the normalized settings map (#4049)
- Bug Fixes
- allow public menuItems queries to opt out of the location restriction (#4000)
- deps-dev: bump @typescript-eslint/parser from 6.21.0 to 8.61.0 (#4056)
- deps-dev: bump composer/composer from 2.2.28 to 2.2.29 in /plugins/wp-graphql (#4096)
- deps-dev: bump guzzlehttp/guzzle from 7.12.1 to 7.15.1 in /plugins/wp-graphql (#4101)
- deps-dev: bump phpstan/phpstan from 2.2.2 to 2.2.5 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#4051)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 8 updates (#4015)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 9 updates (#4061)
- deps-dev: bump the npm-dev-minor-patch group with 9 updates (#4036)
- deps: bump webonyx/graphql-php from 15.33.0 to 15.33.1 in /plugins/wp-graphql in the wp-graphql-composer-patch group (#4007)
- deps: bump webonyx/graphql-php from 15.33.1 to 15.34.0 in /plugins/wp-graphql (#4052)
- don’t deprecate connection edge node/cursor fields (#4006)
- don’t force a SQL LIMIT on childOf term queries (#4001)
- make name optional in register_enum_type() PHPStan param (#4004)
- read use_featured_image for the PostType useFeaturedImage label (#3997)
- resolve timezone setting from gmt_offset when timezone_string is empty (#4023)
WPGraphQL 2.17.0
- New Features
- add hour, minute, and second to DateInput for sub-day date filtering (#3967)
- deps: bump the npm-prod-minor-patch group across 1 directory with 5 updates (#3946)
- deps: bump the npm-prod-minor-patch group with 4 updates (#3956)
- Bug Fixes
- comment cursor throws on COMMENT_PARENT orderby pagination (#3964)
- cursor pagination drops results for searched post connections (relevance-aware cursors) (#3935)
- deps-dev: bump @wordpress/env from 10.39.0 to 11.6.0 (#3957)
- deps-dev: bump @wordpress/env from 11.6.0 to 11.8.0 in the npm-dev-minor-patch group (#3974)
- deps-dev: bump guzzlehttp/guzzle from 7.10.0 to 7.12.1 in /plugins/wp-graphql (#3986)
- deps-dev: bump guzzlehttp/psr7 from 2.11.0 to 2.12.1 in /plugins/wp-graphql (#3983)
- deps-dev: bump guzzlehttp/psr7 from 2.8.0 to 2.11.0 in /plugins/wp-graphql (#3926)
- deps-dev: bump phpstan/phpstan from 2.1.54 to 2.1.55 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#3874)
- deps-dev: bump phpstan/phpstan from 2.1.55 to 2.2.2 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#3953)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 5 updates (#3945)
- deps: bump webonyx/graphql-php from 15.32.3 to 15.33.0 in /plugins/wp-graphql (#3973)
- honor public post statuses and read_private_posts cap in post access checks (#3966)
- page-by-URI over-resolution and homepage resolution in subdirectory installs (#3965)
- support WordPress 7.0 in the integration test matrix (#3960)
WPGraphQL 2.16.0
- New Features
- deps: bump the npm-prod-minor-patch group across 1 directory with 5 updates (#3905)
- Bug Fixes
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 7 updates (#3894)
WPGraphQL 2.15.1
- Security
- prevent user enumeration via the deprecated SendPasswordResetEmailPayload.user field; it is now gated on the list_users capability. See GHSA-jhh7-832h-f8hv
- Bug Fixes
- ci: deploy WordPress.org assets via ASSETS_DIR + dedicated asset-update workflow (#3880)
WPGraphQL 2.15.0
- New Features
- deps: bump @wordpress/hooks from 3.58.0 to 4.44.0 (#3853)
- deps: bump the npm-prod-minor-patch group across 1 directory with 7 updates (#3865)
- resolve WPGraphQL settings outside the admin (at the /graphql endpoint) (#3878)
- Bug Fixes
- deps-dev: bump @wordpress/babel-preset-default from 7.42.0 to 8.45.0 (#3871)
- deps-dev: bump symfony/dom-crawler from 5.4.48 to 5.4.52 in /plugins/wp-graphql (#3858)
- deps-dev: bump symfony/yaml from 5.4.45 to 5.4.53 in /plugins/wp-graphql (#3859)
- deps-dev: bump the npm-dev-minor-patch group with 3 updates (#3849)
WPGraphQL 2.14.1
- Bug Fixes
- Allow compatible interface field override with register_graphql_field() (#3539)
WPGraphQL 2.14.0
- New Features
- deps: bump sanitize-html from 2.17.3 to 2.17.4 (#3831)
- deps: bump the npm-prod-minor-patch group across 1 directory with 4 updates (#3826)
- deps: bump the npm-prod-minor-patch group with 4 updates (#3820)
- Bug Fixes
- deps-dev: bump composer/composer from 2.2.27 to 2.2.28 in /plugins/wp-graphql (#3832)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 7 updates (#3827)
- deps-dev: bump the wp-graphql-composer-dev-minor-patch group across 1 directory with 2 updates (#3829)
- security: drop file:// support from createMediaItem mutation (#3834)
WPGraphQL 2.13.0
- New Features
- deps: bump styled-components from 6.4.0 to 6.4.1 in the npm-prod-minor-patch group (#3805)
- deps: bump the npm-prod-minor-patch group with 3 updates (#3792)
- Bug Fixes
- deps-dev: bump phpstan/phpstan from 2.1.46 to 2.1.50 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#3789)
- deps-dev: bump phpstan/phpstan from 2.1.50 to 2.1.51 in /plugins/wp-graphql in the wp-graphql-composer-dev-minor-patch group (#3802)
- deps-dev: bump the npm-dev-minor-patch group across 1 directory with 6 updates (#3799)
- deps: bump webonyx/graphql-php from 15.31.5 to 15.32.3 in /plugins/wp-graphql (#3804)
WPGraphQL 2.12.0
WPGraphQL 2.11.2
WPGraphQL 2.11.1
WPGraphQL 2.11.0
WPGraphQL 2.10.1
WPGraphQL 2.10.0
WPGraphQL 2.9.1
WPGraphQL 2.9.0
WPGraphQL 2.8.0
WPGraphQL 2.7.0
WPGraphQL 2.6.0
202519 releases
WPGraphQL 2.5.4
WPGraphQL 2.5.3
WPGraphQL 2.5.2
WPGraphQL 2.5.1
WPGraphQL 2.5.0
WPGraphQL 2.3.8
WPGraphQL 2.3.6
WPGraphQL 2.3.3
WPGraphQL 2.3.0
WPGraphQL 2.2.0
WPGraphQL v2.1.1
WPGraphQL 2.1.0
WPGraphQL 2.0.0
WPGraphQL 1.32.1
WPGraphQL 1.32.0
WPGraphQL 2.0.0-beta.2
WPGraphQL 1.31.1
WPGraphQL 1.31.0
WPGraphQL 1.30.0
202417 releases
WPGraphQL 1.29.3
WPGraphQL 1.29.2
WPGraphQL 1.29.1
WPGraphQL 1.29.0
WPGraphQL 1.28.1
WPGraphQL 1.28.0
WPGraphQL 1.27.2
WPGraphQL 1.27.1
WPGraphQL 1.27.0
WPGraphQL 1.26.0
WPGraphQL 1.25.0
WPGraphQL 1.24.0
WPGraphQL 1.23.0
WPGraphQL 1.22.1
WPGraphQL 1.22.0
WPGraphQL 1.21.0
WPGraphQL 1.20.0
202321 releases
WPGraphQL 1.19.0
WPGraphQL 1.18.2
WPGraphQL 1.18.1
WPGraphQL 1.1.8.0
WPGraphQL 1.17.0
WPGraphQL 1.16.0
WPGraphQL 1.15.0
WPGraphQL 1.14.10
WPGraphQL 1.14.9
WPGraphQL 1.14.8
WPGraphQL 1.14.7
WPGraphQL 1.14.6
WPGraphQL 1.14.5
WPGraphQL 1.14.4
WPGraphQL 1.14.3
WPGraphQL 1.14.2
WPGraphQL .1.14.1
WPGraphQL 1.14.0
WPGraphQL 1.13.10
WPGraphQL 1.13.9
WPGraphQL 1.13.8
202231 releases
WPGraphQL 1.13.7
WPGraphQL 1.13.6
WPGraphQL 1.13.5
WPGraphQL 1.13.4
WPGraphQL 1.13.2
WPGraphQL 1.13.1
WPGraphQL 1.13.0
WPGraphQL 1.12.3
WPGraphQL 1.12.2
WPGraphQL 1.12.1
WPGraphQL 1.12.0
WPGraphQL 1.11.3
WPGraphQL 1.11.2
WPGraphQL 1.11.1
WPGraphQL 1.11.0
WPGraphQL 1.10.0
WPGraphQL 1.9.1
WPGraphQL 1.9.0
WPGraphQL 1.8.7
WPGraphQL 1.8.6
WPGraphQL 1.8.5
WPGraphQL 1.8.4
WPGraphQL 1.8.3
WPGraphQL 1.8.2
WPGraphQL 1.8.1
WPGraphQL 1.8.0
WPGraphQL 1.7.2
WPGraphQL 1.7.1
WPGraphQL 1.7.0
WPGraphQL 1.6.12
WPGraphQL 1.6.11
202153 releases
WPGraphQL 1.6.10
WPGraphQL 1.6.9
WPGraphQL 1.6.8
WPGraphQL 1.6.7
WPGraphQL 1.6.6
WPGraphQL 1.6.5
WPGraphQL 1.6.4
WPGraphQL 1.6.3
WPGraphQL 1.6.2
WPGraphQL 1.6.1
WPGraphQL 1.5.9
WPGraphQL 1.6.0
WPGraphQL 1.5.8
WPGraphQL 1.5.7
WPGraphQL 1.5.6
WPGraphQL 1.5.5
WPGraphQL 1.5.4
WPGraphQL 1.5.3
WPGraphQL 1.5.2
WPGraphQL 1.5.1
WPGraphQL 1.5.0
WPGraphQL 1.4.3
WPGraphQL 1.4.2
WPGraphQL 1.4.1
WPGraphQL 1.4.0
WPGraphQL 1.3.10
WPGraphQL 1.3.9
WPGraphQL 1.3.8
WPGraphQL 1.3.7
WPGraphQL 1.3.6
WPGraphQL 1.3.5
WPGraphQL 1.3.4
WPGraphQL 1.3.3
WPGraphQL 1.3.2
WPGraphQL 1.3.1
WPGraphQL 1.3.0
WPGraphQL 1.2.6
WPGraphQL 1.2.5
WPGraphQL 1.2.4
WPGraphQL 1.2.3
WPGraphQL 1.2.2
WPGraphQL 1.2.1
WPGraphQL trunk
WPGraphQL 1.2.0
WPGraphQL 1.1.8
WPGraphQL 1.1.7
WPGraphQL 1.1.6
WPGraphQL 1.1.5
WPGraphQL 1.1.4
WPGraphQL 1.1.3
WPGraphQL 1.1.2
WPGraphQL 1.1.1
WPGraphQL 1.1.0
20209 releases
WPGraphQL 1.0.5
WPGraphQL 1.0.4
WPGraphQL 1.0.3
WPGraphQL 1.0.2
WPGraphQL 1.0.1
WPGraphQL 1.0
WPGraphQL 0.15.6
WPGraphQL 0.15.5
WPGraphQL 0.15.4
Questions about WPGraphQL’s releases
What is the latest version of WPGraphQL?
2.26.2, released on Nov 5, 2026 (4 days ago). It’s tested up to WordPress 7.0.8 and needs PHP 7.4 or later.
How often is WPGraphQL updated?
39 releases in the last year, about one every 9 days. Its first release on WordPress.org dates from November 2020.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in WPGraphQL’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.