Is CVE-2026-103692 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-103692

Description

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.