Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: shabti Component: Frontend Admin Clear all filters
TI-2025-19858 CVE-2025-26987 · GHSA-pp8v-4g4g-j2pg

WordPress Frontend Admin by DynamiApps plugin <= 3.25.17 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Reflected XSS.This issue affects Frontend…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0031 Published 2025-02-25 No fix listed CWE-79
TI-2024-10868 CVE-2024-11722 · GHSA-c9fg-2v9w-9vgc

Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection

Priority LOW 27

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.25.1 due to insufficient escaping on the user supplied parameter an…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00624 Published 2024-12-21 No fix listed CWE-89
TI-2024-10866 CVE-2024-11720 · GHSA-2wmf-fqwc-426g

Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 38

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via submission forms in all versions up to, and including, 3.24.5 due to insufficient input sanitization and output escap…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00362 Published 2024-12-14 No fix listed CWE-79