Skip to content
PluginCanary

ACF Frontend Admin by DynamiApps

by Shabti Kaplan · 8,000+ active installs · Checked 3 Nov 2026
Watch

Watch: held back by a low Support score (40 of 100).

77/ 100 Canary Score
Sub-scores for ACF Frontend Admin by DynamiApps
Ownership100
Maintenance100
Security60
Support40
Reputation70

How the score works

Quick answers

Is ACF Frontend Admin by DynamiApps still maintained?
Yes. Last release 1 Nov 2026, 51 releases in the last 24 months. 1 Nov 2026 · wordpress.org
Who owns ACF Frontend Admin by DynamiApps, and has it changed hands?
No change recorded. Main committer shabti since Sep 2019. 3 Nov 2026 · SVN log
Was ACF Frontend Admin by DynamiApps removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is ACF Frontend Admin by DynamiApps safe?
36 known vulnerabilities, all fixed (latest in 3.30.0). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest ACF Frontend Admin by DynamiApps update safe to install?
No ownership change before 3.30.2. No one-star spike after it. 1 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master18 Sep 2019 to 18 Sep 2019, 1 commits
shabti19 Sep 2019 to 1 Nov 2026, 945 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
3 days ago
Releases, 24 months
51
Tested up to
7.1 current
Requires PHP
5.6.0 supported 8.2+
Releases per quarter
Releases per quarter for ACF Frontend Admin by DynamiApps
Q1 20249
Q2 2024104
Q3 202410
Q4 20249
Q1 20259
Q2 20259
Q3 20254
Q4 20254
Q1 20264
Q2 20268
Q3 20266
Q4 20263

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star127
4 star8
3 star9
2 star4
1 star12

Security record

32 vulnerabilities in 24 months (36 on record), all patched (latest fixed in 3.30.0).

Show 36 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026Frontend Admin by DynamiApps <= 3.29.0 - Missing Authorization5.3<= 3.29.03.30.0Patched before disclosure
15 Oct 2026Frontend Admin by DynamiApps <= 3.29.0 - Authenticated (Administrator+) PHP Object Injection6.6<= 3.29.03.30.0Patched before disclosure
13 Oct 2026ACF Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated Privilege Escalation7.3<= 3.29.133.30.0Patched before disclosure
9 Oct 2026Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content6.4<= 3.28.363.29.1Patched before disclosure
7 Oct 2026Frontend Admin by DynamiApps <= 3.29.13 - Authenticated (Administrator+) SQL Injection4.9<= 3.29.133.30.01
5 Sep 2026Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier9.8<= 3.29.123.29.13Patched before disclosure
2 Sep 2026Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Path Traversal8.2<= 3.29.123.29.13Patched before disclosure
31 Aug 2026Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute6.4<= 3.29.113.29.12Patched before disclosure
31 Aug 2026Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag7.5<= 3.29.123.29.13Patched before disclosure
27 Aug 2026Frontend Admin by DynamiApps < 3.29.11 - Authenticated (Subscriber+) Membership Plan Deletion4.3< 3.29.113.29.11Patched before disclosure
18 Aug 2026Frontend Admin by DynamiApps <= 3.29.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.29.103.29.111
15 Aug 2026Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter9.8<= 3.29.93.29.10Patched before disclosure
11 Aug 2026Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token8.8<= 3.29.93.29.10Patched before disclosure
5 Aug 2026Frontend Admin by DynamiApps < 3.29.7 - Missing Authorization4.3< 3.29.73.29.7n/a
5 Aug 2026Frontend Admin by DynamiApps <= 3.29.10 - Missing Authorization4.3<= 3.29.103.29.1114
5 Aug 2026Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Privilege Escalation9.8<= 3.29.123.29.1320
16 Jul 2026Frontend Admin by DynamiApps <= 3.29.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.29.83.29.9Patched before disclosure
28 May 2026Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameter4.9<= 3.28.83.28.29Patched before disclosure
27 May 2026Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter8.8<= 3.29.23.29.3Patched before disclosure
27 May 2026Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection8.8<= 3.29.23.29.3Patched before disclosure
14 May 2026Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form8.8<= 3.28.363.29.1Patched before disclosure
25 Mar 2026Frontend Admin by DynamiApps <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts7.2<= 3.28.313.28.32Patched before disclosure
8 Jan 2026Frontend Admin by DynamiApps <= 3.28.23 - Unauthenticated Stored Cross-Site Scripting via 'update_field'7.2<= 3.28.233.28.24Patched before disclosure
8 Jan 2026Frontend Admin by DynamiApps <= 3.28.25 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Element9.1<= 3.28.253.28.26Patched before disclosure
8 Jan 2026Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field9.8<= 3.28.293.28.3052

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

40% of 5 support threads resolved in the last 2 months.

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ACF Frontend Admin by DynamiApps
4 May 20263,270
11 May 20261,770
18 May 20261,628
25 May 2026712
1 Jun 2026552
8 Jun 2026552
15 Jun 20263,289
22 Jun 2026983
29 Jun 2026684
6 Jul 20266,241
13 Jul 20261,709
20 Jul 2026980
27 Jul 2026749
3 Aug 20264,808
10 Aug 20261,310
17 Aug 20267,247
24 Aug 20264,523
31 Aug 20261,309
7 Sep 2026944
14 Sep 20261,086
21 Sep 2026816
28 Sep 2026682
5 Oct 2026449
12 Oct 20263,536
19 Oct 20261,703
26 Oct 20262,524
2 Nov 20261,639

Weekly downloads over the last 4 weeks are 14% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

ACF Content Analysis for Yoast SEOScore 91 · 100,000+Image Aspect Ratio Crop Field forScore 91 · 20,000+WPGraphQL for ACFScore 91 · 10,000+Custom Post Types and Custom FieldsScore 91 · 10,000+Genesis Custom BlocksScore 91 · 10,000+

Facts

Version3.30.2
AuthorShabti Kaplan
Added19 Sep 2019
Last updated1 Nov 2026
Active installs8,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP5.6.0
CategoryUser Management & Authentication > User Registration & Login
Tagsacf frontend, custom fields, custom dashboard, frontend editing, frontend posting

Other plugins by this author: Advanced Queries, One Click Modal, DynamiCard, DynamiApps PostFee

Questions

Is ACF Frontend Admin by DynamiApps still maintained?

Yes. Last release 1 Nov 2026, 51 releases in the last 24 months.

Who owns ACF Frontend Admin by DynamiApps, and has it changed hands?

No change recorded. Main committer shabti since Sep 2019.

Was ACF Frontend Admin by DynamiApps removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is ACF Frontend Admin by DynamiApps safe?

36 known vulnerabilities, all fixed (latest in 3.30.0). Not on the exploited list.

Is the latest ACF Frontend Admin by DynamiApps update safe to install?

No ownership change before 3.30.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue