{"id":"CVE-2026-109892","published":"2026-10-15T13:17:12.697","lastModified":"2026-10-15T14:45:38.353","description":"Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-29-13-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated users to escalate privileges and gain administrative access to the Frontend Admin system, potentially leading to full control over the affected application and its data.","exploitability":"Exploitation is likely straightforward with no special preconditions required, as the vulnerability affects the frontend admin component and allows privilege escalation without authentication.","blast_radius":"If exploited, this could allow attackers to gain complete administrative control over the Frontend Admin system, potentially affecting all user data and functionality within that application.","remediation":"Upgrade to version 3.29.14 or later to remediate this privilege assignment vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","frontend","admin-access"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:46:01.198Z"}}