critical9.8
CVE-2026-103692
The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call …
Impact
The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.
Affected products
| Product | Affected versions |
|---|---|
| Frontend Dashboard WordPress Plugin | before 3.0.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.