{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105993", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-10-06T11:04:35.595Z", "datePublished": "2026-11-03T06:00:23.072Z", "dateUpdated": "2026-11-03T06:00:23.072Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-11-03T06:00:23.072Z"}, "title": "DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update", "problemTypes": [{"descriptions": [{"description": "CWE-862 Missing Authorization", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "DT Directory Lite Addon", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "1.1"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options."}], "references": [{"url": "https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Usama Arshad", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "DT Directory Lite Addon", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "1.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options."}], "id": "CVE-2026-105993", "lastModified": "2026-11-03T16:30:49.290", "metrics": {}, "published": "2026-11-03T06:17:37.513", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/7a71b710-5022-4692-aae8-f6da7ac8b664/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Deferred"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.1]"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}]}, "original": {"product": "DT Directory Lite Addon", "source": "cna", "vendor": "Unknown"}, "product": "dt_directory_lite_addon", "vendor": "wordpress-extensions"}], "created": "2026-11-03T07:30:09.087422+00:00", "updated": "2026-11-03T16:24:56.818921+00:00", "vendors": ["wordpress-extensions", "wordpress-extensions$PRODUCT$dt_directory_lite_addon"], "weaknesses": ["CWE-269", "CWE-352"]}