Skip to content
Threat Feed
Subscribe

Vendor

DymiApps

2 briefs RSS
critical advisory

CVE-2026-6226 - Frontend Admin WordPress Plugin Unauthenticated Privilege Escalation

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthenticated privilege escalation in versions up to and including 3.29.2, allowing attackers to create administrator accounts by injecting a custom form configuration with a spoofed role field.

Frontend Admin by DynamiApps plugin for WordPress <= 3.29.2 cve wordpress privilege-escalation unauthenticated
2r 1t 1c
critical threat

CVE-2026-6228 - WordPress Frontend Admin Plugin Privilege Escalation

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to privilege escalation (CVE-2026-6228) in versions up to and including 3.28.36, allowing unauthenticated attackers to gain administrator privileges.

Frontend Admin by DynamiApps plugin for WordPress privilege-escalation wordpress plugin CVE-2026-6228
2r 1t 1c