Frontend Dashboard — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Frontend Dashboard, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-107424	WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability CWE-266	9.8	Critical	2026-10-14
CVE-2026-103692	Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call	-	-	2026-10-08
CVE-2026-103681	Frontend Dashboard < 3.0.0 - Subscriber+ Profile and Post Field Deletion via fed_user_profile_delete	-	-	2026-10-07
CVE-2025-49310	WordPress Frontend Dashboard plugin <= 2.2.8 - Cross Site Scripting (XSS) Vulnerability CWE-79	6.5	Medium	2025-06-06
CVE-2025-4474	Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Function CWE-285	8.8	High	2025-05-13
CVE-2025-4473	Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function CWE-285	8.8	High	2025-05-13
CVE-2025-4104	Frontend Dashboard 1.0 - 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function CWE-285	9.8	Critical	2025-05-07
CVE-2025-46248	WordPress Frontend Dashboard plugin <= 2.2.5 - SQL Injection Vulnerability CWE-89	9.3	Critical	2025-04-24
CVE-2024-8268	Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call CWE-94	8.8	High	2024-09-10
CVE-2024-32726	WordPress Frontend Dashboard plugin <= 2.2.2 - Sensitive Data Exposure on PII vulnerability CWE-200	7.5	High	2024-04-24
CVE-2024-29775	WordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2024-03-27

All 11 known CVE vulnerabilities affecting Frontend Dashboard with full Chinese analysis, references, and POCs where available.