CVE-2026-75816
Received Received - Intake

Authentication Bypass to Account Takeover in Frontend Admin WordPress Plugin

Publication date: 2026-09-06

Last updated on: 2026-09-06

Assigner: Wordfence

Description
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the pre_update_value function lacking any capability or ownership check, and ActionPost::conditions_logic() short-circuiting its current_user_can('edit_post') authorization gate whenever the post ID is non-numeric — such as the string user_1 — allowing unauthenticated form submissions to be routed to arbitrary user records without restriction. This makes it possible for unauthenticated attackers to overwrite any user's registered email address, including an administrator's, and then leverage WordPress's native password-reset flow to fully take over the targeted account.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-06
Last Modified
2026-09-06
Generated
2026-09-06
AI Q&A
2026-09-06
EPSS Evaluated
N/A
NVD
CVE-2026-75816
EUVD
EUVD-2026-72044

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dynamiapps frontend_admin to 3.29.12 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Frontend Admin by DynamiApps WordPress plugin has an authentication bypass flaw in versions up to 3.29.12. The vulnerability allows unauthenticated attackers to change any user's email address, including administrators, by exploiting a missing capability check in the pre_update_value function. Attackers can then reset passwords via WordPress's native flow to fully take over accounts.

Detection Guidance

Check for the Frontend Admin by DynamiApps plugin versions up to 3.29.12 in WordPress installations. Look for unauthorized form submissions or email changes in user accounts. Review server logs for suspicious POST requests targeting user_1 or similar non-numeric post IDs.

Impact Analysis

If you use this plugin, attackers could take over any user account, including admin accounts, by changing email addresses and resetting passwords. This could lead to complete site compromise, data theft, or unauthorized actions. Unpatched sites are at high risk of exploitation.

Compliance Impact

This vulnerability could violate GDPR or HIPAA by enabling unauthorized access to personal data. Account takeovers may lead to data breaches, unauthorized modifications, or disclosure of sensitive information, resulting in non-compliance with data protection requirements.

Mitigation Strategies

Immediately update the Frontend Admin by DynamiApps plugin to the latest version. Disable the plugin if an update is unavailable. Remove unnecessary user accounts and reset passwords for all privileged users. Monitor for unauthorized account changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75816. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart