Log in Start free

shabti

Products

ProductCVEsExploitedLatest
Frontend Admin by DynamiApps19–Oct 10, 2026

Exploited and recent CVEs

  • CVE-2026-6243 Medium 6.4 Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content 0.2%
  • CVE-2026-75816 Critical 9.8 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier 0.9%
  • CVE-2026-12747 Medium 6.4 Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute 0.3%
  • CVE-2026-19952 High 7.5 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag 1.2%
  • CVE-2026-18432 Critical 9.8 Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter 0.8%
  • CVE-2026-15606 High 8.8 Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token 0.6%
  • CVE-2026-10039 Medium 4.9 Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameter 0.3%
  • CVE-2026-6226 High 8.8 Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection 0.7%
  • CVE-2026-7802 High 8.8 Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter 0.4%
  • CVE-2026-6228 High 8.8 Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form 0.4%
  • CVE-2026-3328 High 7.2 Frontend Admin by DynamiApps <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts 0.6%
  • CVE-2025-14741 Critical 9.1 Frontend Admin by DynamiApps <= 3.28.25 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Element 0.4%
  • CVE-2025-14937 High 7.2 Frontend Admin by DynamiApps <= 3.28.23 - Unauthenticated Stored Cross-Site Scripting via 'update_field' 0.3%
  • CVE-2025-14736 Critical 9.8 Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field 0.7%
  • CVE-2025-13342 Critical 9.8 Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update 2.3%
  • CVE-2024-11722 Medium 5.9 Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection 0.6%
  • CVE-2024-11721 High 8.1 Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation 0.6%
  • CVE-2024-11720 High 7.2 Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting 0.4%
  • CVE-2024-3729 Critical 9.8 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation 0.8%