CVE-2026-119504highCWE-79

CVE-2026-119504: high-severity vulnerability in DynamiApps Frontend Admin by DynamiApps

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability

Published 09 Nov 2026

Follow this CVE + Monitor Frontend Admin by DynamiApps

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Affected products

DynamiApps · Frontend Admin by DynamiApps

Related CVEs — DynamiApps Frontend Admin by DynamiApps

In the same product, most dangerous first.

CVE-2026-119506CRITICALWordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerabilityEPSS —

References

https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-30-1-cross-site-scripting-xss-vulnerability?_s_id=cve