CVE-2026-119506

Summary

The DynamiApps Frontend Admin plugin contains a privilege assignment flaw (CWE-266) that allows unauthenticated or low-privileged users to gain elevated administrative privileges via the acf-frontend-form-element functionality. This enables unauthorized access to sensitive admin features and data manipulation.

Exploitability

Exploitation likely requires no authentication and minimal skill due to the CVSS vector indicating network accessibility, low attack complexity, and no user interaction required.

Blast radius

Successful exploitation could lead to full compromise of WordPress admin functionality, including unauthorized content modification, user privilege escalation, and access to sensitive backend data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.30.2 or later, as the description indicates the vulnerability affects versions from n/a through 3.30.1.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.