{"api_version":"1","generated_at":"2026-11-03T18:05:16+00:00","cve":"CVE-2026-105993","urls":{"html":"https://cve.report/CVE-2026-105993","api":"https://cve.report/api/cve/CVE-2026-105993.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-105993","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-105993"},"summary":{"title":"DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update","description":"The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.","state":"PUBLISHED","assigner":"WPScan","published_at":"2026-11-03 06:17:37","updated_at":"2026-11-03 16:30:49"},"problem_types":["CWE-862 Missing Authorization"],"metrics":[],"references":[{"url":"https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/","name":"https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/","refsource":"contact@wpscan.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-105993","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105993","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Unknown","product":"DT Directory Lite Addon","version":"affected 1.1 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Usama Arshad","lang":"en"},{"source":"CNA","value":"WPScan","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unknown","product":"DT Directory Lite Addon","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.1","status":"affected","version":"0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Usama Arshad"},{"lang":"en","type":"coordinator","value":"WPScan"}],"descriptions":[{"lang":"en","value":"The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options."}],"problemTypes":[{"descriptions":[{"description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-03T06:00:23.072Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan"},"references":[{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/"}],"source":{"discovery":"EXTERNAL"},"title":"DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update","x_generator":{"engine":"WPScan CVE Generator"}}},"cveMetadata":{"assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","assignerShortName":"WPScan","cveId":"CVE-2026-105993","datePublished":"2026-11-03T06:00:23.072Z","dateReserved":"2026-10-06T11:04:35.595Z","dateUpdated":"2026-11-03T06:00:23.072Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-03 06:17:37","lastModifiedDate":"2026-11-03 16:30:49","problem_types":["CWE-862 Missing Authorization"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"105993","Ordinal":"1","Title":"DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings","CVE":"CVE-2026-105993","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"105993","Ordinal":"1","NoteData":"The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.","Type":"Description","Title":"DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings"}]}}}