CVE-2026-107424— WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability
Quick assessment
Affected
M A Vinoth Kumar Frontend Dashboard
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
M. A. Vinoth Kumar Frontend Dashboard（前端仪表板）中存在“不正确权限分配”漏洞，可导致权限提升。该问题影响 Frontend Dashboard：从 n/a 到 3.0.7 版本。
Possible ATT&CK Techniques 1 AI
T1548.001 · Setuid and SetgidAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| M A Vinoth Kumar | Frontend Dashboard | ≤ 3.0.7 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-107424
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| M A Vinoth Kumar | Frontend Dashboard | 0 ~ 3.0.7 | - |
|
II. Public POCs for CVE-2026-107424
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-107424
请登录查看更多情报信息。
Other References for CVE-2026-107424 (1)
IV. Related Vulnerabilities
Same product: Frontend Dashboard
-
CVE-2026-103692
Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege -
CVE-2026-103681
Frontend Dashboard < 3.0.0 - Subscriber+ Profile and Post Fi -
CVE-2025-49310
WordPress Frontend Dashboard plugin <= 2.2.8 - Cross Site Sc -
CVE-2025-4474
Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Au -
CVE-2025-4473
Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to
Same vendor: M A Vinoth Kumar
-
CVE-2025-49310
WordPress Frontend Dashboard plugin <= 2.2.8 - Cross Site Sc -
CVE-2025-46515
WordPress Category Widget plugin <= 2.0.2 - Reflected Cross -
CVE-2025-46248
WordPress Frontend Dashboard plugin <= 2.2.5 - SQL Injection -
CVE-2024-53787
WordPress Random Banner plugin <= 4.2.12 - Cross Site Script -
CVE-2024-35645
WordPress Random Banner plugin <= 4.2.12 - Cross Site Script
Same weakness: CWE-266
-
CVE-2026-109892
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - P -
CVE-2026-109693
WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation -
CVE-2026-109694
WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation -
CVE-2026-16438
An arbitrary operation vulnerability in GENESIS64, ICONICS S -
CVE-2026-73814
Gitea repository ownership escalation by administrators
V. Comments for CVE-2026-107424
No comments yet