CVE-2026-105993
Received Received - Intake

Unauthenticated Settings Modification in DT Directory Lite Addon

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: WPScan

Description
The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-105993

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown DT Directory Lite Addon 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The DT Directory Lite Addon WordPress plugin through version 1.1 has a vulnerability where it does not perform nonce or capability checks on its settings handlers. This allows unauthenticated attackers to modify the plugin's configuration and skin options without proper authorization.

Detection Guidance

Check if the DT Directory Lite Addon plugin version 1.1 or below is installed on your WordPress site. You can do this by inspecting the plugin directory or using WordPress admin panel.

Impact Analysis

This vulnerability allows attackers to change the plugin's settings, potentially altering how the directory appears or functions. This could lead to unauthorized modifications, data exposure, or disruption of the plugin's intended behavior.

Mitigation Strategies

Immediately update the DT Directory Lite Addon plugin to the latest version if available. If no update is available, consider disabling or removing the plugin until a patch is released.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105993. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...