Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Frontend Dashboard plugin lets attackers gain higher rights

CVE-2026-107424 · published 2 days ago
Summary

The Frontend Dashboard plugin for WordPress up to version 3.0.7 can let a user with limited access give themselves more powerful permissions, such as administrator rights. This could let an attacker change site settings, install code, or view sensitive data. Update the plugin to a newer version or remove it if you do not need the feature, and review user accounts for any unexpected privileges.

What to do
  • Update m a vinoth kumar frontend dashboard to version 3.0.8.
Affected software
VendorProductAffected versions
m a vinoth kumar frontend dashboard <= 3.0.7
Fix: upgrade to 3.0.8
Original advisory text
WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-266Incorrect Privilege Assignment
Timeline
Published14 Oct 2026
Updated15 Oct 2026
First seen14 Oct 2026
Sources
CVE-2026-107424 · NVD
CVE-2026-107424 · MITRE
Track software like this
Free during beta