CVE-2026-119506criticalCWE-266

CVE-2026-119506: critical vulnerability in DynamiApps Frontend Admin by DynamiApps

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability

Published 09 Nov 2026

Follow this CVE + Monitor Frontend Admin by DynamiApps

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

DynamiApps · Frontend Admin by DynamiApps

Related CVEs — DynamiApps Frontend Admin by DynamiApps

In the same product, most dangerous first.

CVE-2026-119504HIGHWordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerabilityEPSS —

References

https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-30-1-privilege-escalation-vulnerability?_s_id=cve