Content Injection Vulnerability in WP Quick FrontEnd Editor Plugin by WordPress

CVE-2021-4383

What is CVE-2021-4383?

The WP Quick FrontEnd Editor plugin for WordPress is susceptible to a content injection vulnerability owing to insufficient capability checks in its page-editing features. This flaw allows low-authenticated attackers, including users with subscriber roles, to arbitrarily edit or create posts and pages on the website. Such unauthorized modifications can lead to defacement, misinformation, or the embedding of malicious content, posing significant risks to website integrity.

References