{"id":"CVE-2026-107424","published":"2026-10-14T13:17:23.453","lastModified":"2026-10-14T14:26:59.367","description":"Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/frontend-dashboard/vulnerability/wordpress-frontend-dashboard-plugin-3-0-7-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to escalate privileges within the Frontend Dashboard application by incorrectly assigning user permissions, potentially leading to full system compromise. The flaw enables unauthorized users to gain elevated access that they shouldn't have.","exploitability":"Exploitation is likely straightforward with no special preconditions required, as the vulnerability directly affects privilege assignment logic without requiring complex attack chains or specific user interactions.","blast_radius":"If exploited, this could allow attackers to gain full administrative access to the dashboard and potentially compromise the entire application environment, affecting all users and data managed through the system.","remediation":"Upgrade to version 3.0.8 or later to address the privilege assignment vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","access-control","web-application"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:47:20.036Z"}}