CVE-2023-51411 WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload
Attackers can upload malicious files to execute arbitrary code on WordPress sites using the Frontend Admin plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-51411?
CVE-2023-51411 is a critical vulnerability in Shabti Kaplan Frontend Admin by DynamiApps, published on 29 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3.
Weakness: CWE-434
Which versions are affected by CVE-2023-51411?
It affects 1 product.
Products include Dynamiapps Frontend Admin.
How do I fix CVE-2023-51411?
No fix has been published for CVE-2023-51411 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-51411 being exploited?
There is no known exploitation of CVE-2023-51411 in the wild and no public exploit code.
Other vulnerabilities in Shabti Kaplan Frontend Admin by DynamiApps
- CVE-2024-3729 Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation
- CVE-2024-11721 Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation
- CVE-2024-11720 Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2025-26987 WordPress Frontend Admin by DynamiApps plugin <= 3.25.17 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-11722 Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection
Sources
Also known as GHSA-5qfh-3v8w-664f.