Frontend Dashboard CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Frontend Dashboard CVE published 2026-10-08

CVE-2026-103692

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators. This vulnerability affects WordPress installations using Frontend Dashboard versions 3.0.0 to 3 [truncated]