Read the docs

shabti

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

shabti records in CISA KEV

No shabti vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Frontend Admin 6 records MEDIUM

Records

6 records in Frontend Admin · all components

TI-2024-10866 CVE-2024-11720 · GHSA-2wmf-fqwc-426g

Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 38

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via submission forms in all versions up to, and including, 3.24.5 due to insufficient input sanitization and output escap…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00362 Published 2024-12-14 No fix listed CWE-79
TI-2025-19858 CVE-2025-26987 · GHSA-pp8v-4g4g-j2pg

WordPress Frontend Admin by DynamiApps plugin <= 3.25.17 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Reflected XSS.This issue affects Frontend…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0031 Published 2025-02-25 No fix listed CWE-79
TI-2024-10868 CVE-2024-11722 · GHSA-c9fg-2v9w-9vgc

Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection

Priority LOW 27

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.25.1 due to insufficient escaping on the user supplied parameter an…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00624 Published 2024-12-21 No fix listed CWE-89
Open these records in search →