CVE-2026-103692 — Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call

CVE-2026-103692

Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call PUBLISHED

Description (CNA)

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.

Affected (CNA)

Vendor / product	Versions
Unknown / Frontend Dashboard	affected 3.0.0 before 3.0.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d2341538-77fa-48a0-83e3-bc9a3818276c/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.