CVE-2026-81343
CVE-2026-81343 · Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a public form.
CVSS 5.3 · Media · EPSS 0,2%
- Publicación
- Actualización
Productos y versiones afectados
acf frontend admin by dynamiapps
- Versiones
- ≥ 0, ≤ 3.29.13: Afectada (semver)
Sin corrección publicada