What is GHSA-jjg3-qq29-rm7h?

GHSA-jjg3-qq29-rm7h is a security advisory published by GitHub Security Advisories with Medium severity. The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a...

Which CVE IDs does GHSA-jjg3-qq29-rm7h cover?

GHSA-jjg3-qq29-rm7h covers the following CVE IDs: CVE-2026-81343. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jjg3-qq29-rm7h?

GHSA-jjg3-qq29-rm7h has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-jjg3-qq29-rm7hMediumCVSS 5.3

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a...

Vendor

GitHub Security Advisories

Published

October 17, 2026

Last Modified

October 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-81343 →

📋 Description

The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a public form.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-81343
https://wpscan.com/vulnerability/1919eb80-195e-48ed-b58e-3cab4bb1d73d
https://github.com/advisories/GHSA-jjg3-qq29-rm7h