Unrated severityNVD Advisory· Published Oct 8, 2026

CVE-2026-103692

Description

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Frontend Dashboardllm-fuzzy
Range: <3.0.5
Package: https://wordpress.org/plugins/frontend-dashboard

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d2341538-77fa-48a0-83e3-bc9a3818276c/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000