CVE-2026-66638: WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026
·Updated
Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.
Affected Software
1 affected component
DynamiApps WordPress Frontend Admin<=3.29.10
Event History
Aug 18, 2026
CVE Published
via MITRE·01:59 PM
Data Sourced
via MITRE·01:59 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments and users are in scope?
Sites using DynamiApps WordPress Frontend Admin version 3.29.10 or earlier are affected according to the available data. The issue is relevant where users have Contributor-level access.
2
What conditions are required to exploit this issue?
An attacker needs network access, a low-complexity exploit path, Contributor-level privileges, and user interaction. The reported impact includes limited confidentiality, integrity, and availability effects, with scope changed.