SQL Injection Vulnerability in Frontend Admin by DynamiApps
CVE-2025-49267

8.5HIGH

Key Information:

Vendor

WordPress
Status
Frontend Admin By Dynamiapps
Vendor
CVE Published:
14 August 2025

What is CVE-2025-49267?

An SQL Injection vulnerability in Frontend Admin by DynamiApps allows for unauthorized access to database information through poorly sanitized inputs. Attackers can exploit this flaw to execute arbitrary SQL commands, potentially leading to data leakage and manipulation. It is crucial for users of versions n/a through 3.28.3 of this plugin to implement security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Frontend Admin by DynamiApps <= 3.28.3

References

https://patchstack.com/database/wordpress/plugin/acf-fron...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Frissi0n (Patchstack Alliance)
JSON
.
CVE-2025-49267 : SQL Injection Vulnerability in Frontend Admin by DynamiApps