Skip to content

Shabti vulnerabilities

Products

Frontend Admin By Dynamiapps 33

Newest

shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability CVE-2026-109892 9.8 CriticalOctober 15, 2026
shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability CVE-2026-42722 7.6 HighOctober 10, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content CVE-2026-6243 6.4 MediumOctober 10, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier CVE-2026-75816 Public exploit 9.8 CriticalSeptember 6, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps < 3.29.13 - Unauthenticated .htaccess and index.php Deletion via Custom Directory Path Traversal CVE-2026-81347 5.9 MediumSeptember 4, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute CVE-2026-12747 6.4 MediumSeptember 1, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag CVE-2026-19952 Public exploit 7.5 HighSeptember 1, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion CVE-2026-81346 4.3 MediumAugust 29, 2026
shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-66638 6.5 MediumAugust 18, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter CVE-2026-18432 9.8 CriticalAugust 16, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token CVE-2026-15606 8.8 HighAugust 11, 2026
shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability CVE-2026-66662 9.8 CriticalAugust 6, 2026
shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability CVE-2026-66470 7.1 HighAugust 6, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps < 3.29.9 - Unauthenticated Stored Cross-Site Scripting via Form Field CVE-2026-13609 8.8 HighJuly 31, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing Authorization CVE-2026-11867 6.5 MediumJuly 30, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameter CVE-2026-10039 4.9 MediumMay 29, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection CVE-2026-6226 8.8 HighMay 28, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter CVE-2026-7802 8.8 HighMay 28, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form CVE-2026-6228 8.8 HighMay 15, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts CVE-2026-3328 7.2 HighMarch 26, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.25 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Element CVE-2025-14741 9.1 CriticalJanuary 9, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.23 - Unauthenticated Stored Cross-Site Scripting via 'update_field' CVE-2025-14937 7.2 HighJanuary 9, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field CVE-2025-14736 Public exploit 9.8 CriticalJanuary 9, 2026
shabti frontend admin by dynamiapps Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update CVE-2025-13342 Public exploit 9.8 CriticalDecember 3, 2025
shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerability CVE-2025-49267 8.5 HighAugust 14, 2025
shabti frontend admin by dynamiapps WordPress Frontend Admin by DynamiApps plugin <= 3.28.7 - Arbitrary File Download Vulnerability CVE-2025-49303 6.8 MediumJuly 4, 2025
dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 more WordPress Frontend Admin by DynamiApps plugin <= 3.25.17 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-26987 7.1 HighFebruary 25, 2025
dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 more Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection CVE-2024-11722 5.9 MediumDecember 21, 2024
dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 more Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation CVE-2024-11721 8.1 HighDecember 14, 2024
dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 more Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting CVE-2024-11720 7.2 HighDecember 14, 2024
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 more Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation CVE-2024-3729 9.8 CriticalMay 2, 2024
dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 more WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload CVE-2023-51411 10.0 CriticalDecember 29, 2023