Skip to content
OpenAdvisories

Vendor

shabti

19 known vulnerabilities.

Products

Frontend Admin by DynamiApps 19
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-75816 Public exploit

    Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the pre_update_value function lacking any capability or ownership check, and ActionP…

    shabti Frontend Admin by DynamiApps Web / CMS
  • Critical 9.8
    CVE-2026-18432

    Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because `ActionUser::conditions_logic()` gates the `current_user_can('edit_user', $user_id)` aut…

    shabti Frontend Admin by DynamiApps Web / CMS
  • Critical 9.1
    CVE-2025-14741

    Frontend Admin by DynamiApps <= 3.28.25 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Element

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to missing authorization to unauthorized data modification and deletion due to a missing capability check on the 'delete_object' function in all versions up to, and including, 3.28.25. This m…

    shabti Frontend Admin by DynamiApps Web / CMS
  • Critical 9.8
    CVE-2025-14736 Public exploit

    Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. This is due to insufficient validation of user-supplied role values in the 'validate_value', 'pre_update_value', and 'ge…

    shabti Frontend Admin by DynamiApps Web / CMS
  • Critical 9.8
    CVE-2025-13342 Public exploit Scanner template

    Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOpti…

    shabti Frontend Admin by DynamiApps Web / CMS
  • Critical 9.8
    CVE-2024-3729

    Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'fea_encrypt' function in all versions up to, and including, 3.19.4. This makes it possible for unauthenticated attackers to manipulat…

    shabti Frontend Admin by DynamiApps Web / CMS