CVE-2026-18432

creationtimestamp| type| source ---|---|--- 2026-08-16 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt6ik2sv4v2e 2026-08-16 06:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j4muboc22 2026-08-16 12:00:25+00:00| seen|...

CVE-2026-18432

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because ActionUser::conditionslogic gates the currentusercan'edituser', $userid authorization check behind an isnumeric test, causing...