CVE-2024-8268

🗓️ 10 Sep 2024 02:05:10Reported by WordfenceType

Frontend Dashboard WordPress plugin allows unauthorized code execution and privilege escalation by authenticated attackers

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8268	10 Sep 202405:51	–	circl
CNNVD	WordPress plugin Frontend Dashboard 代码注入漏洞	10 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8268 Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call	10 Sep 202402:05	–	cvelist
EUVD	EUVD-2024-49055	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8268	10 Sep 202403:15	–	nvd
Patchstack	WordPress Frontend Dashboard Plugin <= 2.2.4 is vulnerable to Arbitrary Code Execution	10 Sep 202400:00	–	patchstack
Patchstack	WordPress Frontend Dashboard plugin <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call vulnerability	10 Sep 202401:17	–	patchstack
Positive Technologies	PT-2024-38901 · WordPress · Frontend Dashboard	9 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8268	4 Feb 202522:26	–	redhatcve
Vulnrichment	CVE-2024-8268 Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call	10 Sep 202402:05	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

buffercode frontend_dashboardRange<2.2.5wordpress

[
  {
    "vendor": "vinoth06",
    "product": "Frontend Dashboard",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.2.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.4/route/class-fed-request.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7d66694a-c99f-44f8-8004-1a47ad9f9250
plugins	www.plugins.trac.wordpress.org/changeset/3147868/frontend-dashboard/tags/2.2.5/route/class-fed-request.php

08 Apr 2026 17:02Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.00365

SSVC

CWE-94