Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

WordPress Frontend Admin plugin <= 3.29.10: Unauthenticated Admin Access

CVE-2026-66662 · published 3 months ago
Summary

A security issue in the WordPress Frontend Admin plugin allows an attacker to gain administrative access to a website without a password. This could allow an attacker to make changes to the site, including deleting content or installing malicious software. Update the plugin to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
shabti kaplan frontend admin by dynamiapps <= 3.29.10
Original advisory text
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-266Incorrect Privilege Assignment
Timeline
Published6 Aug 2026
Updated4 Nov 2026
First seen6 Aug 2026
Sources
CVE-2026-66662 · NVD
CVE-2026-66662 · MITRE
Track software like this
Free during beta