SecAlerts
d

dynamiapps

Security Risk Profile

68
/100
high

Security Risk Score

Comprehensive risk assessment based on 23 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 29, 2023 to present

23
Total CVEs
18
Critical+High
0
Exploited
13
Unpatched

Threat Assessment

Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
68/100
high
📈 6 in Last 30 Days

Severity Distribution

Critical
7
High
11
Medium
5
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
5
2
SQL Injection
3
3
Input Validation
1
4
Path Traversal
1
5
Malicious File Upload
1

Most Affected Products

1. DynamiApps Frontend Admin19
2. DynamiApps Frontend Admin Wordpress6
3. DynamiApps WordPress Frontend Admin2
4. DynamiApps Frontend Admin by DynamiApps WordPress plugin1

Recent Vulnerabilities

See more →
CVE-2026-66638
CVSS 6.5medium

WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability

Aug 18, 2026🔧 No Patch
CVE-2026-18432
CVSS 9.8critical

Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter

Aug 16, 2026🔧 No Patch
CVE-2026-15606
CVSS 8.8high

Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token

Aug 11, 2026🔧 No Patch
CVE-2026-66662
CVSS 9.8critical

WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability

Aug 6, 2026🔧 No Patch
CVE-2026-13609
CVSS 8.8high

Frontend Admin by DynamiApps < 3.29.9 - Unauthenticated Stored Cross-Site Scripting via Form Field

Jul 31, 2026🔧 No Patch
CVE-2026-11867
CVSS 6.5medium

Frontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing Authorization

Jul 30, 2026🔧 No Patch
CVE-2026-10039
CVSS 4.9medium

Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameter

May 29, 2026🔧 No Patch
CVE-2026-6226
CVSS 8.8high

Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection

May 28, 2026🔧 No Patch
CVE-2026-7802
CVSS 8.8high

Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter

May 28, 2026🔧 No Patch
CVE-2026-6228
CVSS 8.8high

Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form

May 15, 2026🔧 No Patch

Monitor dynamiapps in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

dynamiapps Security Vulnerabilities & Risk Score | 23 CVEs | SecAlerts - SecAlerts