CVE-2026-103692: Frontend Dashboard 3.0.0 to before 3.0.5

Affected technology

Frontend Dashboard · 3.0.0 to before 3.0.5
Vendor not specified by the source

Description’s affected range: before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data

Component: Not specified by the source

What an attacker can do

Unauthenticated users can take over any account, including administrators.