CVE-2026-6403

The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3. This is due to insufficient path validation in the qckply_zip_theme() function, which appends a user-controlled 'stylesheet' parameter directly to the theme root directory path without sanitizing directory traversal sequences. This makes it possible for unauthenticated attackers to trigger the creation of a ZIP archive containing arbitrary files from the server's filesystem — including wp-config.

• CWE-22

• https://plugins.trac.wordpress.org/browser/quick-playground/tags/1.3.1/api.php#L62
• https://plugins.trac.wordpress.org/browser/quick-playground/tags/1.3.1/api.php#L631
• https://plugins.trac.wordpress.org/browser/quick-playground/tags/1.3.1/utility.php#L162
• https://plugins.trac.wordpress.org/browser/quick-playground/tags/1.3.1/utility.php#L248
• https://plugins.trac.wordpress.org/browser/quick-playground/trunk/api.php#L62
• https://plugins.trac.wordpress.org/browser/quick-playground/trunk/api.php#L631
• https://plugins.trac.wordpress.org/browser/quick-playground/trunk/utility.php#L162
• https://plugins.trac.wordpress.org/browser/quick-playground/trunk/utility.php#L248
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3514238%40quick-playground&new=3514238%40quick-playground&sfp_email=&sfph_mail=
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3523317%40quick-playground&new=3523317%40quick-playground&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a39dccb6-b635-44af-b0e0-c3010b719773?source=cve

Published

May 15, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64024In the Linux kernel, the following vulnerability has been re…9.4
• CVE-2026-64025In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-64026In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64027In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64028In the Linux kernel, the following vulnerability has been re…
• CVE-2026-64029In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64030In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-64031In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64032In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64033In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-64034In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-64035In the Linux kernel, the following vulnerability has been re…9.8