CVE-2026-103693
Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to arbitrary file write and potential remote code execution.
| Vendor | unknown |
| Product | frontend dashboard |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown frontend dashboard
Be the first to know when new unknown vulnerabilities affecting unknown frontend dashboard are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Frontend Dashboard
0 < 3.0.5
Unknown / ProfileGrid
0 < 6.0.0.5
References
Credits
sungbyeongchan WPScan