CyberRota Analysis
AI-GeneratedThe Frontend Admin plugin for WordPress prior to version 3.29.7 is vulnerable due to a lack of capability checks on taxonomy term operations, enabling authenticated users with low privileges, such as Subscribers, to create, rename, and delete arbitrary taxonomy terms. This could lead to unauthorized modifications of site content and potential disruption of site functionality. WordPress site administrators, particularly those using this plugin, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges (such as Subscribers) to create, rename, and delete arbitrary taxonomy terms.