CVE-2026-11867
Frontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing Authorization
CVSS Score
6.5
EPSS Score
0.1%
EPSS Percentile
4th
The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges (such as Subscribers) to create, rename, and delete arbitrary taxonomy terms.
| Vendor | unknown |
| Product | frontend admin by dynamiapps |
| Published | Jul 30, 2026 |
| Last Updated | Jul 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown frontend admin by dynamiapps
Be the first to know when new medium vulnerabilities affecting unknown frontend admin by dynamiapps are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Frontend Admin by DynamiApps
0 < 3.29.7
References
Credits
Meher Sudhakar Abbireddi WPScan