CVE-2026-81346 — Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

CVE-2026-81346

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion PUBLISHED

Description (CNA)

The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete arbitrary membership plans.

Affected (CNA)

Vendor / product	Versions
Unknown / Frontend Admin by DynamiApps	affected 0 before 3.29.11

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/0fee8405-24c3-470e-b16d-7c839cba6038/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.