WordPress plugin
Frontend Dashboard security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High6
- Medium5
- Low0
All Frontend Dashboard vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated PHP Object Injection ≤6.0.0.4Update to 6.0.0.5 | CVE-2026-103693 | |
| High7.3 | 3.0.4 - Unauthenticated Privilege Escalation 3.0.0 – 3.0.4Update to 3.0.5 | CVE-2026-103692 | |
| High8.8 | 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Function 1.0 – 2.2.7Update to 2.2.8 | CVE-2025-4474 | |
| High8.8 | 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function 1.5.10 – 2.2.7Update to 2.2.8 | CVE-2025-4473 | |
| Critical9.8 | 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function 1.0 – 2.2.6Update to 2.2.7 | CVE-2025-4104 | |
| High7.5 | Unauthenticated SQL Injection ≤2.2.5Update to 2.2.6 | CVE-2025-46248 | |
| High8.8 | Authenticated (Subscriber+) Arbitrary Function Call ≤2.2.4Update to 2.2.5 | CVE-2024-8268 |
- High8.1Unauthenticated PHP Object Injection
≤6.0.0.4Update to 6.0.0.5
- High7.33.0.4 - Unauthenticated Privilege Escalation
3.0.0 – 3.0.4Update to 3.0.5
- High8.82.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Function
1.0 – 2.2.7Update to 2.2.8
- High8.82.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function
1.5.10 – 2.2.7Update to 2.2.8
- Critical9.82.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function
1.0 – 2.2.6Update to 2.2.7
- High7.5Unauthenticated SQL Injection
≤2.2.5Update to 2.2.6
- High8.8Authenticated (Subscriber+) Arbitrary Function Call
≤2.2.4Update to 2.2.5
Frontend Dashboard: common questions
Does Frontend Dashboard have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in Frontend Dashboard: 1 critical, 6 high, 5 medium. None are known to affect version null.
How do I check which version of Frontend Dashboard I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Frontend Dashboard vulnerability?
CVE-2026-103693, published Oct 27, 2026: Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).
Is any Frontend Dashboard vulnerability listed in CISA KEV?
No. None of the known Frontend Dashboard vulnerabilities is currently listed in the CISA KEV catalog.