https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-26987.htmlhttps://patchthecve.com/cve/CVE-2025-26987.htmlWed, 17 Jun 2026 09:02:43 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Reflected XSS.This issue affects Frontend Admin by DynamiApps: from n/a through <= 3.25.17.https://patchthecve.com/cve/CVE-2024-11721.htmlhttps://patchthecve.com/cve/CVE-2024-11721.htmlWed, 17 Jun 2026 06:58:19 +0000HIGH 8.1: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.24.5. This is due to insufficient controls on the user role select field when utilizing the 'Role' field in a form. This makes it possible for unauthenticated attackershttps://patchthecve.com/cve/CVE-2024-11720.htmlhttps://patchthecve.com/cve/CVE-2024-11720.htmlWed, 17 Jun 2026 06:58:18 +0000HIGH 7.2: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via submission forms in all versions up to, and including, 3.24.5 due to insufficient input sanitization and output escaping on the new Taxonomy form. This makes it possible for unauthenticated attackehttps://patchthecve.com/cve/CVE-2024-3729.htmlhttps://patchthecve.com/cve/CVE-2024-3729.htmlWed, 17 Jun 2026 07:44:53 +0000CRITICAL 9.8: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'fea_encrypt' function in all versions up to, and including, 3.19.4. This makes it possible for unauthenticated attackers to manipulate the user processing forms, which can b