CVE-2026-105993

Full vulnerability record from the local CVENow database.

Description

The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-03 06:17:37.513000

Last modified

2026-11-03 06:17:37.513000

View original CVE JSON

{
  "id": "CVE-2026-105993",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-03T06:17:37.513",
  "lastModified": "2026-11-03T06:17:37.513",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Unknown",
          "product": "DT Directory Lite Addon",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "1.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/",
      "source": "[email protected]"
    }
  ]
}