CVE-2025-14736

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions through 3.28.25

Description The Frontend Admin by DynamiApps plugin for WordPress has a flaw that allows unauthenticated attackers to register as administrators and gain complete control of a site. This is possible because user-supplied role values are not adequately validated in the validate value, pre update value, and get fields display functions. An attacker needs access to a user registration form that includes a Role field to exploit this issue.

Recommendations Versions prior to 3.28.25 should be updated.