Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4529 articles · 259724 vulns · 37/41 feeds (7d)
← Back to list
—
CVE-2026-105993
unknown · dt directory lite addon

DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update

Description

The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.

Affected Products

VendorProductVersions
unknowndt directory lite addon0

References

  • https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/(exploit, vdb-entry, technical-description)

Related News (1 articles)

Tier C
VulDB17h ago
CVE-2026-105993 | DT Directory Lite Addon Plugin up to 1.1 on WordPress Settings authorization
→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No
Actively exploited❌ No
CWECWE-862
PublishedNov 3, 2026
Last enriched16h agov2
Trending Score29
Source articles2
Independent1
Info Completeness7/14
Missing: cvss, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-81648EXPKEV
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
Trending: 122
CRITICALCVE-2026-104647
weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can()
Trending: 29
CRITICALCVE-2026-106004
DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation
Trending: 29
CRITICALCVE-2026-105967
Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter
Trending: 29
HIGHCVE-2026-103379
WATI Chat and Notification <= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token
Trending: 27

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Nov 3, 2026
Discovered by ZDM
Nov 3, 2026
Updated: severity, cweIds
Nov 3, 2026

Version History

v2
Last enriched 16h ago
v2Tier C16h ago

Updated severity from NONE to CRITICAL and added CWE-862 (Missing Authorization) based on vendor classification.

severitycweIds
via VulDB
v117h ago

Initial creation