CVE-2021-4383

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to page content injection in versions up to, and including, 5.5. This is due to missing capability checks in the plugin's page-editing functionality. This makes it possible for low-authenticated attackers, such as subscribers, to edit/create any page or post on the blog.

• CWE-862
• CWE-862

• https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-wp-quick-frontend-editor-plugin-unpatched/Exploit
• https://wordpress.org/plugins/wp-quick-front-end-editor/#developersProduct
• https://www.wordfence.com/threat-intel/vulnerabilities/id/f5492bff-cfd9-41ed-a59b-4445d5e83e86?source=cveThird Party Advisory
• https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-wp-quick-frontend-editor-plugin-unpatched/Exploit
• https://wordpress.org/plugins/wp-quick-front-end-editor/#developersProduct
• https://www.wordfence.com/threat-intel/vulnerabilities/id/f5492bff-cfd9-41ed-a59b-4445d5e83e86?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43824Envoy is an open source edge and service proxy, designed for…7.5
• CVE-2021-43825Envoy is an open source edge and service proxy, designed for…7.5
• CVE-2021-43826Envoy is an open source edge and service proxy, designed for…7.5
• CVE-2021-43827discourse-footnote is a library providing footnotes for post…4.3
• CVE-2021-43828PatrOwl is a free and open-source solution for orchestrating…7.5
• CVE-2021-43829PatrOwl is a free and open-source solution for orchestrating…8.8
• CVE-2021-43830OpenProject is a web-based project management software. Open…8.8
• CVE-2021-43831Gradio is an open source framework for building interactive …7.7
• CVE-2021-43832Spinnaker is an open source, multi-cloud continuous delivery…9.8
• CVE-2021-43833eLabFTW is an electronic lab notebook manager for research t…8.8
• CVE-2021-43834eLabFTW is an electronic lab notebook manager for research t…9.8
• CVE-2021-43835Sulu is an open-source PHP content management system based o…7.2