Skip to content
Sign in
5.3 Medium

CVE-2026-81343 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of…

Description

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a public form.

Affected products and versions

Product Affected versions Fixed in
ACF Frontend Admin by DynamiApps 3.29 earliest → 3.29.13 No fix stated

Other CVEs of ACF Frontend Admin by DynamiApps

The 2 CVEs of ACF Frontend Admin by DynamiApps →
CVE-2026-81344 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be… 6.6 Medium
Track this CVE