CVE-2026-119506: WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Frontend Admin by DynamiAppsto a version that resolves this vulnerability.Fixed in 3.30.2
Event History
Frequently Asked Questions
Which installations are affected?
Frontend Admin by DynamiApps versions through 3.30.1 are affected. The available data does not identify any unaffected fixed version.
Can this be exploited remotely without an existing account or user interaction?
Yes. The CVSS vector indicates network-based exploitation with low attack complexity, no required privileges, and no user interaction.
What is the expected impact of successful exploitation?
Successful exploitation can result in privilege escalation and high impact to confidentiality and integrity. The supplied CVSS vector indicates no availability impact.