CVE Catalog

CVE-2026-107424

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Summary

An incorrect privilege assignment vulnerability exists in the M A Vinoth Kumar Frontend Dashboard plugin, allowing privilege escalation. This enables users to gain higher privileges than intended.

Risk Assessment

An attacker could exploit the vulnerability to escalate privileges and gain access to administrative functions, potentially leading to WordPress site takeover. This may result in content modification, malware installation, or data theft.

Recommendation

Update the Frontend Dashboard plugin to a version later than 3.0.7 that fixes the vulnerability. It is also recommended to verify user privileges and audit accounts.

Other vulnerabilities in Frontend Dashboard

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS