What is CVE-2026-11867?

CVE-2026-11867 is a medium-severity vulnerability in Frontend Admin By Dynamiapps, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-07-30.

How severe is CVE-2026-11867?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Frontend Admin By Dynamiapps

CVE-2026-11867

The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges (such as Subscribers)…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Unknown Frontend Admin By Dynamiapps — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-11867?: CVE-2026-11867 is a medium-severity vulnerability in Frontend Admin By Dynamiapps, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-07-30.
How severe is CVE-2026-11867?: Medium severity. CVSS v3 base score is 6.5 out of 10.