Known Vulnerabilities for WP Frontend Admin by Jose Vega
Listed below are 10 of the newest known vulnerabilities associated with "WP Frontend Admin" by "Jose Vega".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-46365 json | phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint t... | Not Provided | 2026-05-15 | 2026-05-28 |
| CVE-2026-45009 json | phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordi... | Not Provided | 2026-05-15 | 2026-05-28 |
| CVE-2026-42202 json | nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (POST/nova-vendor/nova-toggl... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-40304 json | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler (contro... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-39425 json | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vul... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2026-39392 json | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization an... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-39390 json | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization an... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-10039 json | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-7802 json | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includ... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-6228 json | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3... | Not Provided | 2026-05-15 | 2026-05-15 |