Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Shabti Kaplan Clear all filters
TI-2026-74751 CVE-2026-109892

Privilege escalation in Frontend Admin by DynamiApps WordPress plugin

Priority MEDIUM 48

Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00261 Published 2026-10-15 No fix listed CWE-266
TI-2025-31315 CVE-2025-49267 · GHSA-68g2-x75x-8jv9

WordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Fro…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.003 Published 2025-08-14 No fix listed CWE-89
TI-2025-31351 CVE-2025-49303 · GHSA-gvhh-6vgh-3hfp

WordPress Frontend Admin by DynamiApps plugin <= 3.28.7 - Arbitrary File Download Vulnerability

Priority LOW 31

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path Traversal.This issue affects Frontend Admin…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00481 Published 2025-07-04 No fix listed CWE-22