CVE-2026-105993: medium-severity vulnerability in DT Directory Lite Addon
DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.2%
The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Unknown · DT Directory Lite Addonpublic PoCs found — 1
cve_referencewpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.