Aller au contenu
Se connecter
4.3 Moyenne

CVE-2026-103681 The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions,…

Description

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields.

Produits et versions touchés

Produit Versions touchées Corrigé en
Frontend Dashboard 3.0 premières → < 3.0.0 3.0.0

Autres CVE de Frontend Dashboard

Les 3 CVE de Frontend Dashboard →
CVE-2026-103693 The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an… 9.0 Critique CVE-2026-103692 The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions… 9.8 Critique
Suivre cette CVE