CVE-2020-36699

The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the qppr_save_quick_redirect_ajax and qppr_delete_quick_redirect functions in versions up to, and including, 5.1.9. This makes it possible for low-privileged attackers to interact with the plugin settings and to create a redirect link that would forward all traffic to an external malicious website.

• CWE-284
• CWE-862

• https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-wordpress-quick-page-post-redirect-plugin-unpatched/Exploit
• https://wpscan.com/vulnerability/10198Third Party Advisory
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-quick-page-post-redirect-security-bypass-5-1-9/Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/11c4b855-8589-4ad2-b414-566ac8eb4632?source=cveThird Party Advisory
• https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-wordpress-quick-page-post-redirect-plugin-unpatched/Exploit
• https://wpscan.com/vulnerability/10198Third Party Advisory
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-quick-page-post-redirect-security-bypass-5-1-9/Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/11c4b855-8589-4ad2-b414-566ac8eb4632?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36692A reflected XSS via POST vulnerability in report scheduler o…5.4
• CVE-2020-36694An issue was discovered in netfilter in the Linux kernel bef…6.7
• CVE-2020-36695Incorrect Default Permissions vulnerability in Hitachi Devic…7.8
• CVE-2020-36696The Product Input Fields for WooCommerce plugin for WordPres…7.5
• CVE-2020-36697The WP GDPR plugin for WordPress is vulnerable to authorizat…6.5
• CVE-2020-36698The Security & Malware scan by CleanTalk plugin for WordPres…8.8
• CVE-2020-3670u'Potential out of bounds read while processing downlink NAS…9.1
• CVE-2020-36700The Page Builder: KingComposer plugin for WordPress is vulne…8.8
• CVE-2020-36701The Page Builder: KingComposer plugin for WordPress is vulne…8.8
• CVE-2020-36702The Ultimate Addons for Gutenberg plugin for WordPress is vu…4.3
• CVE-2020-36703The Elementor Website Builder plugin for WordPress is vulner…5.4
• CVE-2020-36704The Fruitful Theme for WordPress is vulnerable to Stored Cro…5.4