Skip to content
OpenAdvisories
High · 8.5 CVE-2025-49267 EUVD-2025-24773GHSA-68g2-x75x-8jv9

WordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Frontend Admin by DynamiApps: from n/a through <= 3.28.3.

Affected products

VendorProductAffectedFixed
Shabti Kaplan Frontend Admin by DynamiApps ≤ 3.28.3 —

References