CVE-2024-11721

CVE-2024-11721 is a privilege escalation vulnerability affecting the Frontend Admin by DynamiApps plugin for WordPress, impacting all versions up to and including 3.24.5. The flaw stems from insufficient controls on the user role selection field within forms, allowing unauthenticated attackers to create new administrative user accounts if they have access to the form. With a CVSS score of 8.1 (HIGH), this vulnerability presents a significant risk, as it can be exploited remotely with high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.