WordPress WP Quick FrontEnd Editor plugin <= 5.5 - Authenticated Content Injection vulnerability

Back

Product: WP Quick FrontEnd Editor
Description: Authenticated Content Injection vulnerability found by Jerome Bruandet in WordPress WP Quick FrontEnd Editor plugin (versions <= 5.5).
Solution: 2021-01-18 - we were unable to find a patched version of this plugin. WordPress.org notification: "This plugin has been closed as of October 23, 2020 and is not available for download. Reason: Security Issue."
Classification: Type Unknown
OWASP Top 10 A1: Injection
References: Vulnerability details
Plugin changelog
CVE: Name CVE-N/A
Versions: Affected In <= 5.5
Disclosure date: 2021-01-12
Credits: Jerome Bruandet (NinTechNet)

ThreatPress