# CVE-2026-7802: DynamiApps Frontend Admin authorization bypass in Edit-User form

Source: https://junglewise.ai/threats/cve-2026-7802-dynamiapps-frontend-admin-authorization-bypass-in-edit-user-form  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-28. Updated: 2026-05-28  
License: CC BY 4.0 with a link back

CVE-2026-7802 · Severity: high · CVSS 8.8 · Published 2026-05-28

The Frontend Admin plugin for WordPress, which allows site owners to create front-facing forms for user management, contains a security flaw that allows low-level users to take over administrator accounts. By exploiting this vulnerability, an attacker can change an administrator's password or email address, gaining full control over the website. This could lead to complete site defacement, data theft, or the installation of malicious software.

Vendors: [DynamiApps](https://junglewise.ai/threats/vendors/dynamiapps).

## Quick answers

**Is CVE-2026-7802 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7802 being exploited in the wild.

**How severe is CVE-2026-7802?** High severity, with a CVSS score of 8.8, published 28 May 2026.

**Which products and versions are affected?** DynamiApps The Frontend Admin up to, and including, 3.29.2.

**Is there a fix for CVE-2026-7802?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-7802 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-7802?** Check whether you run DynamiApps The Frontend Admin at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Frontend Admin by DynamiApps plugin for WordPress (up to version 3.29.2) fails to perform adequate authorization checks when processing user profile updates. Authenticated attackers with subscriber-level permissions can exploit this by supplying an arbitrary 'user_id' parameter to the Edit-User form. This allows the attacker to overwrite sensitive profile fields, including 'user_pass' and 'user_email', for any user, including administrators. The vulnerability is exploitable when the 'Roles' configuration setting for the Edit-User form is left empty, as the 'load_data()' function fails to restrict the target user ID in this state. A patch is available in newer versions of the plugin.

## Affected products

- DynamiApps The Frontend Admin by DynamiApps up to, and including, 3.29.2

## Timeline

- 2026-05-28: disclosed: CVE published to NVD

## References

- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/actions/user.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/actions/user.php)
- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/actions/user.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/actions/user.php)
- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/classes/submit.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/classes/submit.php)
- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/classes/submit.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.28.36/main/frontend/forms/classes/submit.php)
- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.1/main/frontend/forms/actions/user.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.1/main/frontend/forms/actions/user.php)
- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.1/main/frontend/forms/actions/user.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.1/main/frontend/forms/actions/user.php)
- [https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.1/main/frontend/forms/classes/submit.php](https://plugins.trac.wordpress.org/browser/acf-frontend-form-element/tags/3.29.1/main/frontend/forms/classes/submit.php)