CVE-2026-75816

🗓️ 06 Sep 2026 02:26:52Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 32 Views

Unauthenticated account takeover in Frontend Admin for WordPress up to 3.29.12 via email overwrite.

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2026-75816	6 Sep 202603:10	–	circl
Cvelist	CVE-2026-75816 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier	6 Sep 202602:26	–	cvelist
EUVD	EUVD-2026-72044	6 Sep 202602:26	–	euvd
NVD	CVE-2026-75816	6 Sep 202603:17	–	nvd
Positive Technologies	PT-2026-86473	6 Sep 202600:00	–	ptsecurity

Vulners

Node

dynamiapps frontend_adminRange≤3.29.12wordpress

[
  {
    "vendor": "shabti",
    "product": "Frontend Admin by DynamiApps",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.29.12",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3664865/acf-frontend-form-element
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.10/main/frontend/forms/actions/post.php
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.10/main/frontend/forms/classes/submit.php
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.10/main/frontend/fields/user/class-user-email.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/f1637a3b-7b0f-485d-9d19-4f711f8c671b
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.10/main/frontend/forms/classes/display.php
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.10/main/frontend/forms/actions/post.php

07 Sep 2026 12:17Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.005

SSVC

CWE-287