Frontend Admin by DynamiApps, CVE-2025-49267

CVE, Research URL: CVE-2025-49267
Home page URL: Security reports for Frontend Admin by DynamiApps
Application: Frontend Admin by DynamiApps
Published on: Aug 14, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Frontend Admin by DynamiApps: from n/a through <= 3.28.3.
Affected versions: max 3.28.5.
Status: vulnerable