CVE-2026-66662

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66662

CVE-2026-66662 concerns an Unauthenticated Privilege Escalation in the WordPress plugin Frontend Admin by DynamiApps targeting versions up to 3.29.10 . Affected component is the plugin’s frontend admin functionality; the underlying cause is not detailed in the provided documents beyond the unauth...

CVE-2026-66470

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

EUVD-2026-53887

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66470

The CVE-2026-66470 entry affects the WordPress plugin “Frontend Admin by DynamiApps” versions up to 3.29.10 (

CVE-2026-66470 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

Allocation of Resources Without Limits or Throttling

Overview org.apache.cxf:cxf-rt-frontend-jaxrs is an Apache CXF Runtime JAX-RS Frontend Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of a default restriction on the number of form parameters in incoming messages. An attack...

com.github.skjolber.xml-log-filter:xml-log-filter-jax-rs (2.0.1), com.norconex.crawler:nx-crawler-core (>=4.0.0-beta.1, <=4.0.0-beta.2) +161 more potentially affected by CVE-2026-57819 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =4.2.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.168, =10.0.2, =1.5.0, =1.5.0, =1.5.0, =1.7.0 and more Source cves: CVE-2026-57819 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341991...

be.atbash.test:integration-testing (2.2.0), be.atbash.test:integration-testing-database (2.2.0) +471 more potentially affected by CVE-2026-57819 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =4.0.0, =1.0.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons 2.70.0 - com.codbex.kronos:codbex-kronos-components-api-parent 2.69.0 - com.codbex.kronos:codbex-kronos-components-engine-xsjob 2.69.0 -...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +2585 more potentially affected by CVE-2026-57819 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=3.0.0-milestone1, <=3.6.11)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =3.0.0-milestone1, =1.0.0, =1.11.0, =1.12.0, =1.0.0, =3.6.1, =3.11.0, =3.19.0 - cloud.testload:jmeter-clickhouse-listener 2.00 and more Source cves: CVE-2026-57819 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341991...

be.atbash.test:integration-testing (2.2.0), be.atbash.test:integration-testing-database (2.2.0) +471 more potentially affected by CVE-2026-57819 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =4.0.0, =1.0.0, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons 2.70.0 - com.codbex.kronos:codbex-kronos-components-api-parent 2.69.0 - com.codbex.kronos:codbex-kronos-components-engine-xsjob 2.69.0 -...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +2828 more potentially affected by CVE-2026-57819 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=2.1, <=3.6.11)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =2.1, =1.0.0, =1.11.0, =1.11.0, =1.9.0, =1.0.0, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-57819 Source advisory: MEND:CVE-2026-57819...

com.github.skjolber.xml-log-filter:xml-log-filter-jax-rs (2.0.1), com.norconex.crawler:nx-crawler-core (>=4.0.0-beta.1, <=4.0.0-beta.2) +161 more potentially affected by CVE-2026-57819 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =4.2.0, =4.0.0-beta.1, =4.0.0-beta.1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.168, =10.0.2, =1.5.0, =1.5.0, =1.5.0, =1.7.0 and more Source cves: CVE-2026-57819 Source advisory: MEND:CVE-2026-57819...

PT-2026-68802

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.3 Statamic versions prior to 6.24.2 Description Public frontend forms fail to enforce the file upload restrictions configured in the Control Panel. This allows an unauthenticated visitor to upload file types tha...

CVE-2026-66662: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...

PT-2026-68978

Impact Public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow through a form's assets or files field. For assets fields, files could be stored on a public,...

CVE-2026-66470: Missing Authorization

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

PT-2026-68577

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions prior to 3.29.11 Description Broken access control exists within the subscriber role, allowing unauthorized access or actions within the administrative interface. Recommendations Update to a version newer...

CVE-2026-71434: Unrestricted Upload of File with Dangerous Type

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow...

PT-2026-68578

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions prior to 3.29.11 Description An issue allows unauthenticated users to perform privilege escalation within the software. Recommendations Update to a version newer than 3.29.10...