acf_frontend_admin_by_dynamiapps vulnerabilities
CVEs whose affected-version data names the acf_frontend_admin_by_dynamiapps package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-81344NoneFrontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection
The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users…
▾ Sunlitvia CVEORG
CVE-2026-81343NoneFrontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission
The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenti…
▾ Sunlitvia CVEORG