Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Quick FrontEnd Editor – WordPress Plugin 5.5

  • Severity: medium-risk
  • Status: Open
  • Publication: January 12, 2021

The WP Quick FrontEnd Editor plugin for WordPress has a security vulnerability that can be exploited by attackers with minimal permissions like subscribers. The vulnerability exists in versions up to and including 5.5, and it is caused by inadequate sanitization and escaping of input. This makes it possible for attackers to inject malicious web scripts into pages, which will execute when a user visits the page.

Detected in:

WP Quick FrontEnd Editor – WordPress Plugin open vulnerable versions: >= * <= 5.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.