CVE-2026-109892: WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability
Published Oct 15, 2026
·Updated
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.
Affected Software
1 affected component
DynamiApps Frontend Admin by DynamiApps<=3.29.13
Event History
Oct 15, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Frontend Admin by DynamiApps versions through 3.29.13 are affected. The provided data does not identify an unaffected fixed version.
2
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.
3
What is the potential impact of successful exploitation?
Successful exploitation can result in privilege escalation. The CVSS metrics indicate high potential impact to confidentiality, integrity, and availability.