CVE-2024-3729

🗓️ 02 May 2024 17:15:30Reported by [email protected]Type

The Frontend Admin plugin for WordPress up to version 3.19.4 allows unauthenticated attackers to manipulate user forms, leading to privilege escalation, authentication bypass, or arbitrary web script injection

Reporter	Title	Published	Views	Family All 11
CVE	CVE-2024-3729	2 May 202416:52	–	cve
Cvelist	CVE-2024-3729 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation	2 May 202416:52	–	cvelist
EUVD	EUVD-2024-32303	3 Oct 202520:07	–	euvd
OSV	CVE-2024-3729	2 May 202417:15	–	osv
Patchstack	WordPress Frontend Admin by DynamiApps Plugin <= 3.19.4 is vulnerable to Privilege Escalation	22 Apr 202400:00	–	patchstack
Patchstack	WordPress Frontend Admin by DynamiApps plugin <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation vulnerability	22 Apr 202402:00	–	patchstack
Positive Technologies	PT-2024-27449 · Dynamiapps · The Frontend Admin	2 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3729	5 Feb 202510:11	–	redhatcve
Vulnrichment	CVE-2024-3729 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation	2 May 202416:52	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024)	25 Apr 202415:56	–	wordfence

NVD

Node

dynamiapps frontend_adminRange<3.19.5wordpress

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a2d22c5d-5ef5-4920-a1b5-e8284394c7e8
plugins	www.plugins.trac.wordpress.org/changeset/3073379/acf-frontend-form-element
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.18.15/main/helpers.php

08 Apr 2026 19:21Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.00815