CVE Catalog

CVE-2026-66662

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Summary

The Frontend Admin by DynamiApps plugin versions up to 3.29.10 contain an Unauthenticated Privilege Escalation vulnerability. A remote unauthenticated attacker can escalate privileges in the system.

Risk Assessment

The vulnerability allows an unauthenticated attacker to escalate privileges, potentially leading to full control over the application and data.

Recommendation

It is recommended to update the Frontend Admin by DynamiApps plugin to a version newer than 3.29.10 to mitigate the vulnerability.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS