Frontend Admin by DynamiApps
Shabti Kaplan
Developer
3.29.13
Latest version
8,000
Installations
No date
Last updated
Vulnerability history
0 present
31 patched
25 Mitigation rules
- Unauthenticated Account Takeover via '_acf_objects' Object Identifier vulnerability<= 3.29.1207/09/2026
- Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag vulnerability<= 3.29.1231/08/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute vulnerability<= 3.29.1131/08/2026
- Subscriber+ Arbitrary Membership Plan Deletion vulnerability< 3.29.1131/08/2026
- Cross Site Scripting (XSS) vulnerability<= 3.29.1018/08/2026
- Unauthenticated Privilege Escalation via 'item_id' Parameter vulnerability<= 3.29.918/08/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability< 3.29.917/08/2026
- Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token vulnerability<= 3.29.911/08/2026
- Privilege Escalation vulnerability<= 3.29.1205/08/2026
- Broken Access Control vulnerability<= 3.29.1005/08/2026
- Subscriber+ Taxonomy Term Creation/Modification/Deletion vulnerability< 3.29.705/08/2026
- Authenticated (Administrator+) SQL Injection vulnerability<= 3.28.828/05/2026
- Missing Authorization to Authenticated (Subscriber+) Account Takeover vulnerability<= 3.29.228/05/2026
- Unauthenticated Privilege Escalation vulnerability<= 3.29.228/05/2026
- Unauthenticated Privilege Escalation vulnerability<= 3.28.3615/05/2026
- Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts vulnerability<= 3.28.3130/03/2026
- Unauthenticated Privilege Escalation vulnerability<= 3.24.503/02/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.24.503/02/2026
- Unauthenticated Stored Cross-Site Scripting via 'update_field' vulnerability<= 3.28.2309/01/2026
- Unauthenticated Privilege Escalation to Administrator via Role Form Field vulnerability<= 3.28.2509/01/2026
- Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Element vulnerability<= 3.28.2509/01/2026
- Unauthenticated Arbitrary Options Update vulnerability<= 3.28.2003/12/2025
- SQL Injection vulnerability<= 3.28.312/08/2025
- Arbitrary File Download Vulnerability<= 3.28.726/06/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.25.1723/02/2025
- Unauthenticated SQL Injection vulnerability<= 3.25.120/12/2024
- Improper Missing Encryption Exception Handling to Form Manipulation vulnerability<= 3.19.422/04/2024
- Unauthenticated Arbitrary File Upload vulnerability<= 3.18.327/12/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.7.1119/07/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 3.3.3328/02/2022
- Sensitive Information Disclosure vulnerability< 3.3.3328/02/2022