Approved changes feed: RSS · Atom

cpe:2.3:a:pluginmirror:wp_quick_frontend_editor:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPluginmirror (d0879387-29ce-575e-b863-8e0e1cc816c0)
ProductWp Quick Frontend Editor (d3c536b5-e5ed-50b4-add6-1373b21380a4)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4371 vulnerable 2026-06-08 05:38:09.287166 WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change
MEDIUM (4.3)
The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Setting Changs in versions up to, and including, 5.5. This is due to lacking both a security nonce and a capabilities check. This makes it possible for low-authenticated attackers to change plugin settings even when they do not have the capabilities to do so.
Published: 2023-06-07T01:51:41.960Z
Updated: 2026-04-08T17:20:25.375Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.