Skip to content
Threat Feed

Product

Quick Playground Plugin for WordPress

1 brief RSS
high advisory

CVE-2026-6403: Quick Playground Plugin for WordPress Path Traversal Vulnerability

The Quick Playground plugin for WordPress, versions up to 1.3.3, is vulnerable to a path traversal vulnerability (CVE-2026-6403) in the qckply_zip_theme() function, allowing unauthenticated attackers to create ZIP archives containing arbitrary server files, including wp-config.

Quick Playground plugin for WordPress path-traversal wordpress cve-2026-6403 initial-access
2r 1t 1c