Unknown Frontend Admin By Dynamiapps vulnerabilities

4 CVEs affecting Unknown Frontend Admin By Dynamiapps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81347, published 2026-09-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-13609, published 2026-07-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value after sanitizing it, which restores HTML tags that the sanitizer had neutralized.…
CVE-2026-81347, published 2026-09-04. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleting files within it, allowing unauthenticated attackers to…
CVE-2026-11867, published 2026-07-30. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users…
CVE-2026-81346, published 2026-08-29. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete…