CVE-2026-119506

Name of the Vulnerable Software and Affected Versions DynamiApps Frontend Admin versions prior to 3.30.2

Description An incorrect privilege assignment in the acf-frontend-form-element module allows for privilege escalation. This issue enables an attacker with a low-privilege account to gain administrator rights and take over the site. The flaw can be exploited remotely without requiring a login.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the acf-frontend-form-element module to minimize the risk of exploitation.