CVE Field Guide
About Us
CVE-2026-66470
PUBLISHED
WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability
Assigner:
Patchstack
Reserved:
27.07.2026
Published:
06.08.2026
Updated:
06.08.2026
Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS Score:
7.1
CVSS score
7.1
Attack Vector
Network
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
None
Privileges Required
Low
Integrity Impact
Low
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
Shabti Kaplan
Product
Frontend Admin by DynamiApps
Versions
Default:
unaffected
affected from n/a to 3.29.10 (incl.)
Credits
okndjo | Patchstack Bug Bounty Program
finder
References
https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-29-10-broken-access-control-vulnerability?_s_id=cve
Problem Types
CWE-862 Missing Authorization
CWE
Impacts
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels