CVE-2026-81346

UNKNOWN 0.0

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete arbitrary membership plans.

Vendor	unknown
Product	frontend admin by dynamiapps
Published	Aug 29, 2026

Stay Ahead of the Next One

Get instant alerts for unknown frontend admin by dynamiapps

Be the first to know when new unknown vulnerabilities affecting unknown frontend admin by dynamiapps are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Frontend Admin by DynamiApps

0 < 3.29.11

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/0fee8405-24c3-470e-b16d-7c839cba6038/

Credits

Sai Praneeth Koti WPScan