Advisories · Technology

Frontend Admin by DynamiApps.

Every CVE that names Frontend Admin by DynamiApps among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119504 CVE record

CVSS 7.1 High

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability
- Frontend Admin by DynamiApps
- Cross-site scripting (XSS)
Not analysed yet 9 Nov 2026
CVE-2026-119506 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability
- Frontend Admin by DynamiApps
- Privilege escalation
Not analysed yet 9 Nov 2026
CVE-2026-81347 CVE record

CVSS 5.9 Medium

Frontend Admin by DynamiApps < 3.29.13 - Unauthenticated .htaccess and index.php Deletion via Custom Directory Path Traversal
- Frontend Admin by DynamiApps
- Path traversal
Not analysed yet 4 Sept 2026
CVE-2026-81346 CVE record

CVSS 4.3 Medium

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion
- Frontend Admin by DynamiApps
- Broken access control
Not analysed yet 29 Aug 2026
CVE-2026-13609 CVE record

CVSS 8.8 High

Frontend Admin by DynamiApps < 3.29.9 - Unauthenticated Stored Cross-Site Scripting via Form Field
- Frontend Admin by DynamiApps
- Cross-site scripting (XSS)
Not analysed yet 31 Jul 2026
CVE-2026-11867 CVE record

CVSS 6.5 Medium

Frontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing Authorization
- Frontend Admin by DynamiApps
- Broken access control
Not analysed yet 30 Jul 2026