CVE-2026-81343: CWE-862 Missing Authorization in ACF Frontend Admin by DynamiApps
Description
The ACF Frontend Admin plugin by DynamiApps for WordPress up to version 3.29.13 contains a missing authorization vulnerability. This flaw allows unauthenticated users to submit a form that writes values into the global ACF options store without proper capability checks. As a result, attackers can overwrite site-wide option values via a public form.
Affected software
ACF Frontend Admin by DynamiApps
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-81343 is a missing authorization vulnerability (CWE-862) in the ACF Frontend Admin WordPress plugin by DynamiApps. Versions up to and including 3.29.13 do not verify user capabilities on a form-submission action before writing submitted data into the global Advanced Custom Fields (ACF) options store. This lack of authorization allows unauthenticated visitors to overwrite site-wide option values through a publicly accessible form, potentially impacting site configuration and behavior.
Potential Impact
Unauthenticated attackers can overwrite global ACF option values on the affected WordPress site. This could lead to unauthorized changes in site configuration or behavior, potentially affecting site integrity or availability depending on how these options are used. There is no indication of active exploitation in the wild at this time.
Mitigation Recommendations
No official patch or fix information is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable form or disable the affected plugin if possible to prevent unauthorized submissions.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-08-26T18:15:03.546Z
- State
- PUBLISHED
Threat ID: 6ad3134c2cdf04f656ee8014
Added to database: 10/17/2026, 06:18:52 UTC
Last enriched: 10/17/2026, 06:33:35 UTC
Last updated: 10/17/2026, 19:02:54 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.