WordPress Frontend Admin Plugin Unauthenticated Privilege Escalation (CVE-2026-18432)

Vulnerability Overview Vulnerability Name: Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter CVE ID: CVE-2026-18432 CVSS Score: 9.8 (Critical) Publication Date: August 15, 2026 Last Updated: August 16, 2026 Researcher: DDADDA Affected Scope Software Type: Plugin Software Name: Frontend Admin by DynamiApps Affected Versions: <= 3.29.9 Fixed Version: 3.29.10 Remediation Remediation Recommendation: Update to version 3.29.10 or higher. Vulnerability Description A privilege escalation vulnerability exists in the Frontend Admin by DynamiApps plugin for WordPress, affecting all versions up to 3.29.9. The vulnerability resides in the method. When checking authorization via , if is a non-numeric string, the authorization check is bypassed. An attacker can exploit the unverified AJAX endpoint by passing a non-numeric string (such as "None") as the unverified parameter. This allows the attacker to retrieve a server-signed payload containing a non-numeric user ID. WordPress subsequently casts this value to integer 1 (the default administrator ID), enabling the attacker to overwrite the account's password or email address. Exploiting this vulnerability requires a public-facing frontend user form to be configured; otherwise, a subscriber-level account is sufficient for exploitation. Reference Links plugins.trac.wordpress.org Sharing Options Facebook Twitter LinkedIn Email Vulnerability Details Software Type: Plugin Software Name: Frontend Admin by DynamiApps Software Name: acf-frontend-form-element Fixed: Yes Remediation Recommendation: Update to version 3.29.10 or higher Affected Versions: <= 3.29.9 Fixed Version: 3.29.10 Recent Vulnerabilities More Information View More Vulnerabilities in This Software Package: VIEW MORE VULNERABILITIES IN THIS SOFTWARE PACKAGE Copyright Copyright Notice: Copyright 2012-2026 Defiant Inc. License: Defiant hereby grants you a perpetual, worldwide, non-exclusive, irrevocable copyright license to reproduce, prepare derivative works, publicly display, publicly perform, sublicense, and distribute Defiant's software vulnerability information. Any copies for this purpose must bear the Defiant copyright notice and any copies in this license. For more information, see Read more. Contact Information Contact Us: If you have any information to add or if you discover any errors, please contact us at wfi-support@wordfence.com for appropriate adjustments. Additional Information Wordfence Intelligence Free API: Wordfence Intelligence offers free personal and commercial API access to the latest WordPress vulnerability database, along with free webhook integration to stay up to date. Get started today! LEARN MORE Wordfence Plugin: Want to be notified immediately if your WordPress site is affected by a vulnerability? Install the Wordfence plugin to receive instant notifications when your site is vulnerable. GET WORDFENCE Wordfence Vulnerability Database: The Wordfence Vulnerability Database is completely free and accessible via API for querying. Please review the documentation to learn how to access and consume vulnerability data. DOCUMENTATION Business Hours Business Hours: Our business hours are 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT, excluding weekends and holidays. Response Time: 24-hour customer support with a 1-hour response time, 365 days a year. Footer Links Terms of Service: Terms of Service Privacy Policy and Notice at Collection: Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information: Do Not Sell or Share My Personal Information Social Media Links Twitter: Twitter Facebook: Facebook LinkedIn: LinkedIn Instagram: Instagram Product Links Wordfence Free: Wordfence Free Wordfence Premium: Wordfence Premium Wordfence Care: Wordfence Care Wordfence Response: Wordfence Response Wordfence CLI: Wordfence CLI Wordfence Intelligence: Wordfence Intelligence Wordfence Central: Wordfence Central Support Links Documentation: Documentation Learning Center: Learning Center Free Support: Free Support Premium Support: Premium Support News Links Blog: Blog In The News: In The News Vulnerability Advisories: Vulnerability Advisories About Links About Wordfence: About Wordfence Affiliate Program: Affiliate Program Employment: Employment Contact: Contact Security: Security CVE Request Form: CVE Request Form Subscription Links Subscribe: Sign up for news and updates from our panel of experienced security professionals. Email: you@example.com Agree to Terms: By checking this box I agree to the terms of service and privacy policy. Sign Up: SIGN UP Copyright Information Copyright: © 2012-2026 Defiant Inc. All Rights Reserved Additional Information Wordfence Intelligence: Wordfence Intelligence Wordfence: Wordfence

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Frontend Admin Plugin Unauthenticated Privilege Escalation (CVE-2026-18432)

More from this source