agentprime: shabti-frontend-admin-by-dynamiappsEvery new CVE for shabti-frontend-admin-by-dynamiapps.https://agentprime.io/CVE-2026-6243: Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Contenthttps://agentprime.io/advisories/CVE-2026-6243/https://agentprime.io/advisories/CVE-2026-6243/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 06:40:13 GMTCVECVE-2026-75816: Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifierhttps://agentprime.io/advisories/CVE-2026-75816/https://agentprime.io/advisories/CVE-2026-75816/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 02:26:52 GMTCVEcriticalCVE-2026-12747: Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-12747/https://agentprime.io/advisories/CVE-2026-12747/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 04:27:52 GMTCVECVE-2026-19952: Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Taghttps://agentprime.io/advisories/CVE-2026-19952/https://agentprime.io/advisories/CVE-2026-19952/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 04:27:50 GMTCVECVE-2026-18432: Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameterhttps://agentprime.io/advisories/CVE-2026-18432/https://agentprime.io/advisories/CVE-2026-18432/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 04:24:49 GMTCVEcriticalCVE-2026-15606: Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Tokenhttps://agentprime.io/advisories/CVE-2026-15606/https://agentprime.io/advisories/CVE-2026-15606/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 20:26:10 GMTCVECVE-2026-10039: Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameterhttps://agentprime.io/advisories/CVE-2026-10039/https://agentprime.io/advisories/CVE-2026-10039/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 07:46:48 GMTCVECVE-2026-6226: Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injectionhttps://agentprime.io/advisories/CVE-2026-6226/https://agentprime.io/advisories/CVE-2026-6226/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 08:27:38 GMTCVECVE-2026-7802: Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameterhttps://agentprime.io/advisories/CVE-2026-7802/https://agentprime.io/advisories/CVE-2026-7802/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 03:27:28 GMTCVECVE-2026-6228: Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Formhttps://agentprime.io/advisories/CVE-2026-6228/https://agentprime.io/advisories/CVE-2026-6228/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 07:46:36 GMTCVECVE-2026-3328: Frontend Admin by DynamiApps <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Postshttps://agentprime.io/advisories/CVE-2026-3328/https://agentprime.io/advisories/CVE-2026-3328/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 02:25:19 GMTCVECVE-2025-14741: Frontend Admin by DynamiApps <= 3.28.25 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Elementhttps://agentprime.io/advisories/CVE-2025-14741/https://agentprime.io/advisories/CVE-2025-14741/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jan 2026 07:22:11 GMTCVEcriticalCVE-2025-14937: Frontend Admin by DynamiApps <= 3.28.23 - Unauthenticated Stored Cross-Site Scripting via 'update_field'https://agentprime.io/advisories/CVE-2025-14937/https://agentprime.io/advisories/CVE-2025-14937/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jan 2026 07:22:10 GMTCVECVE-2025-14736: Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Fieldhttps://agentprime.io/advisories/CVE-2025-14736/https://agentprime.io/advisories/CVE-2025-14736/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jan 2026 06:34:51 GMTCVEcriticalCVE-2025-13342: Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Updatehttps://agentprime.io/advisories/CVE-2025-13342/https://agentprime.io/advisories/CVE-2025-13342/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 12:29:55 GMTCVEcriticalCVE-2024-11722: Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-11722/https://agentprime.io/advisories/CVE-2024-11722/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 Dec 2024 09:23:55 GMTCVECVE-2024-11721: Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-11721/https://agentprime.io/advisories/CVE-2024-11721/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Dec 2024 08:26:39 GMTCVECVE-2024-11720: Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-11720/https://agentprime.io/advisories/CVE-2024-11720/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Dec 2024 08:26:38 GMTCVECVE-2024-3729: Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulationhttps://agentprime.io/advisories/CVE-2024-3729/https://agentprime.io/advisories/CVE-2024-3729/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:28 GMTCVEcritical