CVE-2026-105993 PUBLISHED

DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update

Assigner: WPScan
Reserved: 06.10.2026 Published: 03.11.2026 Updated: 03.11.2026

The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.

Product Status

Vendor Unknown
Product DT Directory Lite Addon
Versions Default: unknown
  • affected from 0 to 1.1 (incl.)

Credits

  • Usama Arshad finder
  • WPScan coordinator

References

Problem Types

  • CWE-862 Missing Authorization CWE