CyberSecBulletin

Frontend Dashboard vulnerabilities

We track 2 vulnerabilities in Frontend Dashboard products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest Frontend Dashboard vulnerabilities

  • 9.0 Critical severity

    Frontend Dashboard: Deserialization of Untrusted Data

    CVE-2026-103693Frontend Dashboard

    The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP ob

  • 9.8 Critical severity

    Frontend Dashboard: Improper Privilege Management

    CVE-2026-103692Frontend Dashboard

    The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users