Skip to content
OpenAdvisories

Vendor

shabti

19 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-19952 Public exploit

    Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the move_folders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated atta…