Unknown Frontend Dashboard vulnerabilities

2 CVEs affecting Unknown Frontend Dashboard, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-103692, published 2026-10-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-103692, published 2026-10-08. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class…
CVE-2026-103681, published 2026-10-07. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete…