CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This makes it possible for unauthenticated attackers to retrieve the sync code, upload PHP files with path traversal, and achieve remote code execution on the server.
Explanation of Vulnerability in Simple Terms
Quick Playground versions 1.3.1 and earlier lack authorization checks, allowing unauthenticated attackers to read, modify, or delete data without restriction. The vulnerability requires only network access and no user interaction. All confidentiality, integrity, and availability protections are bypassed.
What an attacker can do
Read, modify, or delete any data in the application without authentication.
Potential impact on your site
Complete compromise of data confidentiality, integrity, and availability if Quick Playground is used on your site.
Conditions required to exploit
Network access to the application. No authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
