Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-49303

WordPress Frontend Admin by DynamiApps plugin <= 3.28.7 - Arbitrary File Download Vulnerability

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path Traversal.This issue affects Frontend Admin by DynamiApps: from n/a through <= 3.28.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shabti Kaplan Frontend Admin by DynamiApps

Default version status: unaffected

  • 0 to ≤ 3.28.7affected

References