Critical · 10.0 CVE-2023-51411 EUVD-2023-56132GHSA-5qfh-3v8w-664f

WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload

Published Dec 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Shabti Kaplan Product: Frontend Admin by DynamiApps

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3.

Affected products

Vendor	Product	Affected	Fixed
Shabti Kaplan	Frontend Admin by DynamiApps	≤ 3.18.3	—

References

https://patchstack.com/database/vulnerability/acf-frontend-form-element/wordpress-frontend-admin-by-dynamiapps-plugin-3-18-3-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry