CVE-2026-11867

CVE-2026-11867 concerns the WordPress plugin Frontend Admin by DynamiApps (before 3.29.7). The issue: the plugin does not perform capability checks for taxonomy term creation, modification, and deletion, enabling authenticated users with low privileges (e.g., Subscribers) to create, rename, and d...