Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-49303 EUVD-2025-19988GHSA-gvhh-6vgh-3hfp

WordPress Frontend Admin by DynamiApps plugin <= 3.28.7 - Arbitrary File Download Vulnerability

Published Jul 4, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path Traversal.This issue affects Frontend Admin by DynamiApps: from n/a through <= 3.28.7.

Affected products

VendorProductAffectedFixed
Shabti Kaplan Frontend Admin by DynamiApps ≤ 3.28.7 —

References