Skip to content
OpenAdvisories

Product · labibahmed42

WP Quick FrontEnd Editor – WordPress Plugin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-4378

    WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with minimal p…

    labibahmed42 WP Quick FrontEnd Editor – WordPress Plugin Web / CMS
  • Medium 4.3
    CVE-2021-4371

    WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change

    The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Setting Changs in versions up to, and including, 5.5. This is due to lacking both a security nonce and a capabilities check. This makes it possible for low-authenticated attackers to change pl…

    labibahmed42 WP Quick FrontEnd Editor – WordPress Plugin Web / CMS
  • Medium 6.1
    CVE-2021-4363

    WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting

    The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.5 due to insufficient input sanitization and output escaping on the 'save_content_front' function that uses print_r on the us…

    labibahmed42 WP Quick FrontEnd Editor – WordPress Plugin Web / CMS