shabti vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20251
3. 202614

Newest CVEs

• CVE-2026-6243

  Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content

  shabti · Frontend Admin by DynamiApps

  Medium6.4
• CVE-2026-75816

  Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

  shabti · Frontend Admin by DynamiApps

  Critical9.8
• CVE-2026-12747

  Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute

  shabti · Frontend Admin by DynamiApps

  Medium6.4
• CVE-2026-19952

  Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

  shabti · Frontend Admin by DynamiApps

  High7.5
• CVE-2026-18432

  Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter

  shabti · Frontend Admin by DynamiApps

  Critical9.8
• CVE-2026-15606

  Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token

  shabti · Frontend Admin by DynamiApps

  High8.8
• CVE-2026-10039

  Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameter

  shabti · Frontend Admin by DynamiApps

  Medium4.9
• CVE-2026-6226

  Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection

  shabti · Frontend Admin by DynamiApps

  High8.8
• CVE-2026-7802

  Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter

  shabti · Frontend Admin by DynamiApps

  High8.8
• CVE-2026-6228

  Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form

  shabti · Frontend Admin by DynamiApps

  High8.8