CVE-2026-105993: Security vulnerability

Published Nov 3, 2026

Updated

The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.

Event History

Nov 3, 2026

CVE Published

via NVD·06:17 AM

Data Sourced

via NVD·06:17 AM

Description

Frequently Asked Questions

Who can exploit this issue?

Unauthenticated attackers can exploit the affected settings handlers; no logged-in WordPress account is required.

What access does an attacker need to make changes?

The issue affects settings handlers that lack both nonce and capability checks, allowing requests to modify the plugin's configuration and skin options without authentication.

Which plugin versions are affected?

DT Directory Lite Addon WordPress plugin versions through 1.1 are affected.

CVE-2026-105993: Security vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need to make changes?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need to make changes?

Which plugin versions are affected?