CVE-2020-36699

Name of the Vulnerable Software and Affected Versions The Quick Page/Post Redirect Plugin for WordPress versions up to, and including, 5.1.9

Description The issue is related to authorization bypass due to missing capability checks on the qppr save quick redirect ajax and qppr delete quick redirect functions. This allows low-privileged attackers to interact with the plugin settings and create a redirect link that would forward all traffic to an external malicious website.

Recommendations For versions up to, and including, 5.1.9, update to a version that includes the necessary capability checks to prevent authorization bypass.