NVD security advisory
Security advisory for The Frontend Dashboard WordPress plugin
CVE-2026-103693
Full advisory details, affected packages, severity context, and original source.
Affected technology
The Frontend Dashboard WordPress pluginPHP ecosystem
Advisory overview
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to arbitrary file write and potential remote code execution.
