# DynamiApps vulnerabilities Source: https://junglewise.ai/threats/vendors/dynamiapps Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/dynamiapps.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 20 vulnerabilities in DynamiApps: 2 in the last 7 days and 14 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-119504, was published on 9 November 2026. 3 vulnerabilities in the last four weeks, level on the four before (3). 1 critical against 0. 1 technology has a page of its own. ## Counts - Last 7 days: 2 - Last 30 days: 5 - Last 90 days: 14 - All time: 20 (3 critical, 0 exploited in the wild) ## About DynamiApps Developer of mobile applications and software solutions. ## Latest DynamiApps vulnerabilities - [CVE-2026-119504: DynamiApps Frontend Admin stored XSS vulnerability](https://junglewise.ai/threats/cve-2026-119504-improper-neutralization-of-input-during-web-page-generation) (high, CVSS 7.1, published 9 Nov 2026) - [CVE-2026-119506: DynamiApps Frontend Admin privilege escalation in acf-frontend-form-element](https://junglewise.ai/threats/cve-2026-119506-incorrect-privilege-assignment-vulnerability-in-dynamiapps) (critical, CVSS 9.1, published 9 Nov 2026) - [CVE-2026-81344: ACF Frontend Admin PHP object injection in deserialization](https://junglewise.ai/threats/cve-2026-81344-the-acf-frontend-admin-by-dynamiapps-wordpress-plugin-through-3) (info, published 17 Oct 2026) - [CVE-2026-81343: ACF Frontend Admin by DynamiApps access control bypass](https://junglewise.ai/threats/cve-2026-81343-the-acf-frontend-admin-by-dynamiapps-wordpress-plugin-through-3) (info, published 17 Oct 2026) - [CVE-2026-109892: Frontend Admin by DynamiApps privilege escalation](https://junglewise.ai/threats/cve-2026-109892-incorrect-privilege-assignment-vulnerability-in-shabti-kaplan) (critical, CVSS 9.8, published 15 Oct 2026) - [CVE-2026-42722: Frontend Admin by DynamiApps SQL injection](https://junglewise.ai/threats/cve-2026-42722-administrator-sql-injection-in-frontend-admin-by-dynamiapps-3-29) (high, CVSS 7.6, published 10 Oct 2026) - [CVE-2026-6243: Frontend Admin by DynamiApps stored XSS via kses bypass](https://junglewise.ai/threats/cve-2026-6243-the-frontend-admin-by-dynamiapps-plugin-for-wordpress-is) (medium, CVSS 6.4, published 10 Oct 2026) - [CVE-2026-92540: Import and export users and customers privilege escalation in user role assignment](https://junglewise.ai/threats/cve-2026-92540-the-import-and-export-users-and-customers-wordpress-plugin-before) (high, CVSS 7.2, published 20 Sep 2026) - [CVE-2026-75816: DynamiApps Frontend Admin authentication bypass to account takeover](https://junglewise.ai/threats/cve-2026-75816-dynamiapps-frontend-admin-authentication-bypass-to-account) (critical, CVSS 9.8, published 6 Sep 2026) - [CVE-2026-81347: Frontend Admin by DynamiApps path traversal file deletion](https://junglewise.ai/threats/cve-2026-81347-frontend-admin-by-dynamiapps-path-traversal-file-deletion) (medium, CVSS 5.9, published 4 Sep 2026) - [CVE-2026-19952: DynamiApps Frontend Admin arbitrary file deletion](https://junglewise.ai/threats/cve-2026-19952-dynamiapps-frontend-admin-arbitrary-file-deletion) (high, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-12747: Frontend Admin by DynamiApps stored XSS via tag shortcode attribute](https://junglewise.ai/threats/cve-2026-12747-frontend-admin-by-dynamiapps-stored-xss-via-tag-shortcode) (medium, CVSS 6.4, published 1 Sep 2026) - [CVE-2026-81346: Frontend Admin by DynamiApps privilege escalation in membership plan deletion](https://junglewise.ai/threats/cve-2026-81346-frontend-admin-by-dynamiapps-privilege-escalation-in-membership) (medium, CVSS 4.3, published 29 Aug 2026) - [CVE-2026-66638: Frontend Admin by DynamiApps cross-site scripting](https://junglewise.ai/threats/cve-2026-66638-frontend-admin-by-dynamiapps-cross-site-scripting) (medium, CVSS 6.5, published 18 Aug 2026) - [CVE-2026-13609: DynamiApps Frontend Admin unauthenticated stored XSS in form fields](https://junglewise.ai/threats/cve-2026-13609-dynamiapps-frontend-admin-unauthenticated-stored-xss-in-form) (info, CVSS 8.8, published 31 Jul 2026) - [CVE-2026-11867: DynamiApps Frontend Admin missing authorization in taxonomy management](https://junglewise.ai/threats/cve-2026-11867-dynamiapps-frontend-admin-missing-authorization-in-taxonomy) (info, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-10039: DynamiApps Frontend Admin SQL Injection in order parameter](https://junglewise.ai/threats/cve-2026-10039-dynamiapps-frontend-admin-sql-injection-in-order-parameter) (medium, CVSS 4.9, published 29 May 2026) - [CVE-2026-6226: DynamiApps Frontend Admin privilege escalation via insecure form handling](https://junglewise.ai/threats/cve-2026-6226-dynamiapps-frontend-admin-privilege-escalation-via-insecure-form) (high, CVSS 8.8, published 28 May 2026) - [CVE-2026-7802: DynamiApps Frontend Admin authorization bypass in Edit-User form](https://junglewise.ai/threats/cve-2026-7802-dynamiapps-frontend-admin-authorization-bypass-in-edit-user-form) (high, CVSS 8.8, published 28 May 2026) - [CVE-2026-6228: DynamiApps Frontend Admin privilege escalation in role update mechanism](https://junglewise.ai/threats/cve-2026-6228-dynamiapps-frontend-admin-privilege-escalation-in-role-update) (high, CVSS 8.8, published 15 May 2026) ## Most severe DynamiApps vulnerabilities - [CVE-2026-75816: DynamiApps Frontend Admin authentication bypass to account takeover](https://junglewise.ai/threats/cve-2026-75816-dynamiapps-frontend-admin-authentication-bypass-to-account) (critical, CVSS 9.8, published 6 Sep 2026) - [CVE-2026-109892: Frontend Admin by DynamiApps privilege escalation](https://junglewise.ai/threats/cve-2026-109892-incorrect-privilege-assignment-vulnerability-in-shabti-kaplan) (critical, CVSS 9.8, published 15 Oct 2026) - [CVE-2026-119506: DynamiApps Frontend Admin privilege escalation in acf-frontend-form-element](https://junglewise.ai/threats/cve-2026-119506-incorrect-privilege-assignment-vulnerability-in-dynamiapps) (critical, CVSS 9.1, published 9 Nov 2026) - [CVE-2026-6226: DynamiApps Frontend Admin privilege escalation via insecure form handling](https://junglewise.ai/threats/cve-2026-6226-dynamiapps-frontend-admin-privilege-escalation-via-insecure-form) (high, CVSS 8.8, published 28 May 2026) - [CVE-2026-7802: DynamiApps Frontend Admin authorization bypass in Edit-User form](https://junglewise.ai/threats/cve-2026-7802-dynamiapps-frontend-admin-authorization-bypass-in-edit-user-form) (high, CVSS 8.8, published 28 May 2026) - [CVE-2026-6228: DynamiApps Frontend Admin privilege escalation in role update mechanism](https://junglewise.ai/threats/cve-2026-6228-dynamiapps-frontend-admin-privilege-escalation-in-role-update) (high, CVSS 8.8, published 15 May 2026) - [CVE-2026-42722: Frontend Admin by DynamiApps SQL injection](https://junglewise.ai/threats/cve-2026-42722-administrator-sql-injection-in-frontend-admin-by-dynamiapps-3-29) (high, CVSS 7.6, published 10 Oct 2026) - [CVE-2026-19952: DynamiApps Frontend Admin arbitrary file deletion](https://junglewise.ai/threats/cve-2026-19952-dynamiapps-frontend-admin-arbitrary-file-deletion) (high, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-92540: Import and export users and customers privilege escalation in user role assignment](https://junglewise.ai/threats/cve-2026-92540-the-import-and-export-users-and-customers-wordpress-plugin-before) (high, CVSS 7.2, published 20 Sep 2026) - [CVE-2026-119504: DynamiApps Frontend Admin stored XSS vulnerability](https://junglewise.ai/threats/cve-2026-119504-improper-neutralization-of-input-during-web-page-generation) (high, CVSS 7.1, published 9 Nov 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, level on the four before (3). 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 1 | 0 | 0 | | 31 Aug 2026 | 4 | 1 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 2 | 0 | 0 | | 12 Oct 2026 | 3 | 1 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 2 | 1 | 0 | ## DynamiApps technologies - [DynamiApps Frontend Admin](https://junglewise.ai/threats/technologies/frontend-admin): 15 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "DynamiApps vulnerabilities", https://junglewise.ai/threats/vendors/dynamiapps, 10 November 2026.