Aller au contenu
Se connecter
9.0 Critique

CVE-2026-103693 The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an…

Description

The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to arbitrary file write and potential remote code execution.

Produits et versions touchés

Produit Versions touchées Corrigé en
Frontend Dashboard 3.0 premières → < 3.0.5 3.0.5
ProfileGrid 6.0 premières → < 6.0.0.5 6.0.0.5

Autres CVE de Frontend Dashboard

Les 3 CVE de Frontend Dashboard →
CVE-2026-103692 The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions… 9.8 Critique CVE-2026-103681 The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions,… 4.3 Moyenne
Suivre cette CVE