shabti

4 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-75816 Public exploit

  Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

  The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the pre_update_value function lacking any capability or ownership check, and ActionP…

  shabti Frontend Admin by DynamiApps Web / CMS
  Sep 6, 2026
• High 7.5
  CVE-2026-19952 Public exploit

  Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

  The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the move_folders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated atta…

  shabti Frontend Admin by DynamiApps Web / CMS
  Sep 1, 2026
• Critical 9.8
  CVE-2025-14736 Public exploit

  Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field

  The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. This is due to insufficient validation of user-supplied role values in the 'validate_value', 'pre_update_value', and 'ge…

  shabti Frontend Admin by DynamiApps Web / CMS
  Jan 9, 2026
• Critical 9.8
  CVE-2025-13342 Public exploit Scanner template

  Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update

  The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOpti…

  shabti Frontend Admin by DynamiApps Web / CMS
  Dec 3, 2025