Unrated severityNVD Advisory· Published Oct 11, 2026

CVE-2026-86706

Description

The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allowing unauthenticated users to alter arbitrary site settings and to make the site unavailable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Quick quotesllm-create
Range: <=1.0.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d160d2a3-acc8-40f5-93ea-65f902f6df5d/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000