6.5
Moyenne
CVE-2026-11867 The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy…
Description
The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges (such as Subscribers) to create, rename, and delete arbitrary taxonomy terms.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Frontend Admin by DynamiApps 3.29 | premières → < 3.29.7 | 3.29.7 |
Autres CVE de Frontend Admin by DynamiApps
Les 4 CVE de Frontend Admin by DynamiApps →
CVE-2026-81347
The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable…
5.9
Moyenne
CVE-2026-81346
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its…
4.3
Moyenne
CVE-2026-13609
The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value…
8.8
Élevée