CRITICAL 9.8 NVD

CVE-2026-103692

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call a

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.

References

https://wpscan.com/vulnerability/d2341538-77fa-48a0-83e3-bc9a3818276c/

Published: 2026-10-08 · Source: NVD · Feed updated: 2026-10-12

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-08 via NVD.

Risk Timeline

CVE Disclosed2026-10-08 · 3 days ago

Remediation Resources

Official Advisory

wpscan.com/vulnerability/d2341538-77fa-48a0-83e3-bc9a3818276c/

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.