CVE-2026-81343
CVE-2026-81343 · Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a public form.
CVSS 5.3 · Medium · EPSS 0.2%
- Published
- Updated
Affected products and versions
acf frontend admin by dynamiapps
- Versions
- ≥ 0, ≤ 3.29.13: Affected (semver)
No fix published