CVE-2026-86706

Name of the Vulnerable Software and Affected Versions Quick quotes WordPress plugin version 1.0.0

Description An issue exists where the plugin fails to perform capability or nonce checks on an AJAX action. This allows unauthenticated users to specify which option is written, enabling them to modify arbitrary site settings and potentially cause a denial of service by making the site unavailable. A nonce is a unique token used to prevent replay attacks and ensure that a request is intentional.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.