CyberRota Analysis
AI-GeneratedThe Frontend Admin plugin for WordPress prior to version 3.29.13 is vulnerable due to inadequate validation of user-controlled directory paths, enabling unauthenticated attackers to delete critical files like index.php and .htaccess outside the intended directory. This flaw can lead to site inoperability, particularly if a non-default form configuration is in use. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleting files within it, allowing unauthenticated attackers to delete index.php and .htaccess files outside the intended directory, including the WordPress root, which can render the site inoperable. Successful exploitation requires a non-default form configuration.