PT-2024-27449 · Dynamiapps · The Frontend Admin

🗓️ 02 May 2024 00:00:00Reported by Positive TechnologiesType

Frontend Admin plugin up to 3.19.4 mishandles fea encrypt, enabling unauthenticated admin changes if openssl is missing.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2024-3729	2 May 202416:52	–	cve
Cvelist	CVE-2024-3729 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation	2 May 202416:52	–	cvelist
EUVD	EUVD-2024-32303	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3729	2 May 202417:15	–	nvd
Patchstack	WordPress Frontend Admin by DynamiApps Plugin <= 3.19.4 is vulnerable to Privilege Escalation	22 Apr 202400:00	–	patchstack
Patchstack	WordPress Frontend Admin by DynamiApps plugin <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation vulnerability	22 Apr 202402:00	–	patchstack
RedhatCVE	CVE-2024-3729	5 Feb 202510:11	–	redhatcve
Vulnrichment	CVE-2024-3729 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation	2 May 202416:52	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024)	25 Apr 202415:56	–	wordfence
WPVulnDB	Frontend Admin by DynamiApps < 3.19.5 - Improper Missing Encryption Exception Handling to Form Manipulation	22 Apr 202400:00	–	wpvulndb

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3073379/acf-frontend-form-element
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-3729
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a2d22c5d-5ef5-4920-a1b5-e8284394c7e8
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
plugins	www.plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.18.15/main/helpers.php
twitter	www.twitter.com/CVEnew/status/1786082073406534137

02 May 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.00721

SSVC