Lucene search
+L

275 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•2 views

CVE-2025-14736: Improper Privilege Management

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. This is due to insufficient validation of user-supplied role values in the 'validatevalue', 'preupdatevalue', and 'getfieldsdisplay' functions. This makes it...

9.8CVSS5.7AI score0.00721EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•22 views

PT-2026-1752

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions through 3.28.25 Description The Frontend Admin by DynamiApps plugin for WordPress has a flaw that allows unauthenticated attackers to register as administrators and gain complete control of a site. This is...

9.8CVSS6.7AI score0.00721EPSS
SaveExploits1References8
GithubExploit
GithubExploit
•added 2025/12/09 10:28 a.m.•233 views

Exploit for CVE-2025-13342

CVE-2025-13342 PoC The Frontend Admin by DynamiApps plugin fo...

9.8CVSS6.4AI score0.02192EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/12/04 12:30 p.m.•18 views

CVE-2025-13342

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOptions::run save handler. This makes it...

9.8CVSS6AI score0.02192EPSS
SaveExploits2References1
NVD
NVD
•added 2025/12/03 1:16 p.m.•27 views

CVE-2025-13342

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOptions::run save handler. This makes it...

9.8CVSS0.02192EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/12/03 12:29 p.m.•25 views

EUVD-2025-200979

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOptions::run save handler. This makes it...

9.8CVSS5.5AI score0.02192EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2025/12/03 12:29 p.m.•54 views

CVE-2025-13342 Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOptions::run save handler. This makes it...

9.8CVSS0.02192EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2025/12/03 7:03 a.m.•30 views

WordPress Frontend Admin by DynamiApps plugin <= 3.28.20 - Unauthenticated Arbitrary Options Update vulnerability

Unauthenticated Arbitrary Options Update vulnerability discovered by YCInfosec in WordPress Plugin Frontend Admin by DynamiApps versions = 3.28.20...

9.8CVSS6.7AI score0.02192EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•1 views

CVE-2025-13342: Missing Authorization

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOptions::run save handler. This makes it...

9.8CVSS5.8AI score0.02192EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/12/03 12:00 a.m.•22 views

WordPress plugin Frontend Admin by DynamiApps 安全漏洞

...

9.8CVSS5.8AI score0.02192EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2025/12/03 12:00 a.m.•24 views

PT-2025-48806

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps plugin for WordPress versions through 3.28.20 Description The Frontend Admin by DynamiApps plugin for WordPress is susceptible to unauthorized modification of arbitrary WordPress options. This is a result of...

9.8CVSS6.3AI score0.02192EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-24773

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00275EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2025-30724

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00276EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-56132

Malicious code in bioql PyPI...

10CVSS9.3AI score0.00617EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-19988

Malicious code in bioql PyPI...

6.8CVSS6.5AI score0.00481EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-5374

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.0031EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-32303

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00815EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/09/24 6:30 p.m.•8 views

CVE-2025-57898

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Vega WP Frontend Admin display-admin-page-on-frontend allows Stored XSS.This issue affects WP Frontend Admin: from n/a through = 1.22.7...

6.5CVSS5.9AI score0.00276EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/22 7:38 p.m.•16 views

WordPress WP Frontend Admin plugin <= 1.22.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Frontend Admin versions = 1.22.7...

6.5CVSS5.9AI score0.00276EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/09/22 7:15 p.m.•10 views

CVE-2025-57898

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Vega WP Frontend Admin display-admin-page-on-frontend allows Stored XSS.This issue affects WP Frontend Admin: from n/a through = 1.22.7...

6.5CVSS0.00276EPSS
SaveExploits0References1
Rows per page
Query Builder