Medium severity4.3NVD Advisory· Published Jun 7, 2023· Updated Jun 17, 2026
CVE-2020-36699
CVE-2020-36699
Description
The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the qppr_save_quick_redirect_ajax and qppr_delete_quick_redirect functions in versions up to, and including, 5.1.9. This makes it possible for low-privileged attackers to interact with the plugin settings and to create a redirect link that would forward all traffic to an external malicious website.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:quick_page\/post_redirect_project:quick_page\/post_redirect:*:*:*:*:*:wordpress:*:*Range: <=5.1.9
- Range: <=5.1.9
Patches
Vulnerability mechanics
References
4- blog.nintechnet.com/authenticated-settings-change-vulnerability-in-wordpress-quick-page-post-redirect-plugin-unpatched/nvdExploit
- wpscan.com/vulnerability/10198nvdThird Party Advisory
- www.acunetix.com/vulnerabilities/web/wordpress-plugin-quick-page-post-redirect-security-bypass-5-1-9/nvdThird Party Advisory
- www.wordfence.com/threat-intel/vulnerabilities/id/11c4b855-8589-4ad2-b414-566ac8eb4632nvdThird Party Advisory
News mentions
0No linked articles in our index yet.