Threats tagged 'ghsa-p8r3-cm77-gmp2'

CVE-2026-81344 is a deserialization vulnerability in the ACF Frontend Admin by DynamiApps WordPress plugin up to version 3.29.13. It allows high-privilege users, such as administrators, to inject PHP objects during deserialization of stored post content rendered on public pages. This can potentially lead to remote code execution if a suitable gadget chain exists in the plugin or WordPress core.