CVE-2026-109892: falha crítica em Shabti Kaplan Frontend Admin by DynamiApps
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.3%
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Shabti Kaplan · Frontend Admin by DynamiAppsCVEs relacionadas — Shabti Kaplan Frontend Admin by DynamiApps
No mesmo produto, das mais perigosas para as menos.
CVE-2023-51411CRITICALWordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2026-66662CRITICALWordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2025-49303MEDIUMWordPress Frontend Admin by DynamiApps plugin <= 3.28.7 - Arbitrary File Download VulnerabilityEPSS 0.5%CVE-2026-66470HIGHWordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-26987HIGHWordPress Frontend Admin by DynamiApps plugin <= 3.25.17 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49267HIGHWordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerabilityEPSS 0.3%