CVE-2021-4363

MEDIUM 6.1CVE-2021-4363 · Published 07/06/2023 · updated 17/06/2026

In short

CVE-2021-4363 is a MEDIUM (CVSS 6.1) vulnerability affecting wp quick frontend editor (webdevocean).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wp quick frontend editor webdevocean	`≤ 5.5`	No fix yet

Description

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.5 due to insufficient input sanitization and output escaping on the 'save_content_front' function that uses print_r on the user-supplied $_REQUEST values . This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

References

blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-wp-quick-frontend-editor-plugin-unpatched · Exploit
wordpress.org/plugins/wp-quick-front-end-editor · Product
wordfence.com/threat-intel/vulnerabilities/id/7ce8ae7d-c2a5-4da3-8bdd-20dfdb5ce700 · Third Party Advisory

More vulnerabilities in wp quick frontend editor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wp quick frontend editor

webdevocean

≤ 5.5

No fix yet

Description

More vulnerabilities in wp quick frontend editor

See all →