A critical privilege escalation vulnerability in the Frontend Admin by DynamiApps WordPress plugin allows unauthenticated attackers to gain full administrative control over affected sites.

The vulnerability stems from an insecure authorization check in the ActionUser::conditions_logic() function. By passing a crafted non-numeric string to the item_id parameter of an unauthenticated AJAX endpoint, an attacker can bypass privilege checks and manipulate user accounts.

A successful exploit allows an unauthorized user to elevate their privileges to administrator. This leads to complete site compromise, including the ability to exfiltrate sensitive data, modify core site configurations, or deploy malicious content, resulting in significant reputational damage and potential regulatory non-compliance. The CVSS score of 9.8 reflects the ease of exploitation and the severity of the resulting impact.

Immediate Action: Update the Frontend Admin by DynamiApps plugin to version 3.29.10 or later immediately.

Proactive Monitoring: Review WordPress audit logs for unexpected administrative account creation or changes to existing administrator account credentials.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious AJAX requests directed at wp_ajax_nopriv_frontend_admin/forms/change_form.

Public Exploit Available: No

This vulnerability presents a severe risk to WordPress installations utilizing the affected plugin. Administrators should prioritize updating to version 3.29.10 to eliminate the underlying logic error. If patching is delayed, disable the plugin until a secure version can be deployed to prevent potential unauthorized access.