CVE-2026-109892: Incorrect Privilege Assignment in Shabti Kaplan Frontend Admin by DynamiApps

This vulnerability in Shabti Kaplan Frontend Admin by DynamiApps (versions up to 3.29.13) is due to incorrect privilege assignment in the acf-frontend-form-element, enabling privilege escalation. An attacker can exploit this flaw remotely without authentication, leading to full compromise of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated attacker to escalate privileges, potentially gaining full control over the affected system. This can lead to complete compromise of confidentiality, integrity, and availability of the system and its data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected component and monitor for suspicious activity related to privilege escalation attempts.