Vulnerabilities > CVE-2021-4371 - Missing Authorization vulnerability in Pluginmirror WP Quick Frontend Editor

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
pluginmirror
CWE-862
NVD
Published: 2023-06-07
Updated: 2024-11-21

Summary

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Setting Changs in versions up to, and including, 5.5. This is due to lacking both a security nonce and a capabilities check. This makes it possible for low-authenticated attackers to change plugin settings even when they do not have the capabilities to do so.

Vulnerable Configurations

Part Description Count
Application
Pluginmirror
1

Common Weakness Enumeration (CWE)

References