一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月8日

CVE-2026-103692 – The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or

未分类
📑 文章目录

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.