{"id":"CVE-2026-42722","published":"2026-10-10T20:16:37.150","lastModified":"2026-10-13T13:28:15.717","description":"Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.","cvssScore":7.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-29-13-sql-injection-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A SQL injection vulnerability in DynamiApps' frontend admin interface allows authenticated attackers with administrator privileges to execute arbitrary database commands, potentially leading to full system compromise. This affects versions up to 3.29.13.","exploitability":"Exploitation requires an authenticated administrator account with access to the frontend admin panel, making it moderately difficult but feasible for attackers who can obtain such credentials.","blast_radius":"If exploited, this vulnerability could allow attackers to read, modify, or delete sensitive database records, potentially leading to complete system takeover and data exfiltration across all administrative functions.","remediation":"Upgrade to DynamiApps version 3.29.14 or later to remediate this SQL injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","admin-panel","database","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:10:28.851Z"}}