Shabti Kaplan vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Shabti Kaplan products: 5 record(s), with severity, exploitation and fixes.

Frontend Admin by DynamiApps 5

Exploited only (KEV) →

CVE-2026-109892 Critical · 9.8 CWE-266 Oct 15, 2026

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.

CVE-2026-42722 High · 7.6 CWE-89 Oct 10, 2026

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

CVE-2026-66638 Medium · 6.5 CWE-79 Aug 18, 2026

WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.

CVE-2026-66662 Critical · 9.8 CWE-266 Aug 6, 2026

WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.

CVE-2026-66470 High · 7.1 CWE-862 Aug 6, 2026

WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.