CVE-2026-103692

CRITICAL 9.8CVE-2026-103692 · Published 08/10/2026 · updated 08/10/2026

In short

CVE-2026-103692 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.

References

wpscan.com/vulnerability/d2341538-77fa-48a0-83e3-bc9a3818276c

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free