CVE-2026-75816

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75816 CVE-2026-75816 Frontend Admin by DynamiApps 3.29.11 - shabti I am @abraxasnull. Loopback lab. The client is CVE-2026-75816-Abraxas-Labs.py. user1 is not a post. Unauthenticated admin-ajax.php...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/ ◈ Vulnerability Field| Detail ---|--- CVE ID| CVE-2025-13342 Score| 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Affected| Frontend Admin by DynamiApps ≤ 3.28.20 Auth| None —...

CVE-2026-119504

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119504 WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

EUVD-2026-119914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119504

The Frontend Admin by DynamiApps WordPress plugin (versions up to and including 3.30.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation within the acf-frontend-form-element component. This vulnerability allows...

CVE-2026-119506

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119506 WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119506

The Frontend Admin by DynamiApps WordPress plugin (versions

CVE-2026-119506 WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

EUVD-2026-119766

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119506: DynamiApps Frontend Admin by DynamiApps: Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element…

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119504: DynamiApps Frontend Admin by DynamiApps: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiApps…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

PT-2026-140334

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by mroccon in WordPress Plugin Frontend Admin by DynamiApps versions = 3.30.1...

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nguyen Quang Tan in WordPress Plugin Frontend Admin by DynamiApps versions = 3.30.1...

VulnCheck KEV: CVE-2023-51411

Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3...

CVE-2026-81344

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given ...

WordPress ACF Frontend Admin by DynamiApps plugin <= 3.29.13 - Unauthenticated ACF Options Page Field Update vulnerability

Unauthenticated ACF Options Page Field Update vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.13...

EUVD-2026-103258

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a...