Sign in

4.3 Medium

CVE-2026-103681 The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions,…

Description

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields.

Affected products and versions

Product	Affected versions	Fixed in
Frontend Dashboard 3.0	earliest → < 3.0.0	3.0.0

The 3 CVEs of Frontend Dashboard →

CVE-2026-103693 The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an… 9.0 Critical CVE-2026-103692 The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions… 9.8 Critical

Do you use Frontend Dashboard?

Track this CVE Watch Frontend Dashboard Check my SBOMs

www.cveye.io/en/cve/CVE-2026-103681

Timeline

Published October 7, 2026
Last modified October 7, 2026

References

wpscan.com wpscan.com

Track this CVE