WordPress Plugin Vulnerabilities

DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation

Description

The plugin does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status.

Proof of Concept

Affects Plugins

Plugin icon
dt-lms-lite
No known fix

References

CVE
CVE-2026-106004

Classification

Type
ACCESS CONTROLS
OWASP top 10
A5: Broken Access Control
CWE
CWE-284
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Enrico Marcolini, Claudio Marchesini, Dottor Marc
Submitter
Enrico Marcolini, Claudio Marchesini, Dottor Marc
Submitter website
https://www.dottormarc.it
Verified
Yes
WPVDB ID
f2a87670-ddbd-455b-884f-9b710d3bb600

Timeline

Publicly Published
2026-10-31 (about 3 days ago)
Added
2026-10-24 (about 10 days ago)
Last Updated
2026-10-24 (about 10 days ago)

Other

Published
Title
Published
2025-02-12
Title
Rank Math SEO < 1.0.236 - Contributor+ Arbitrary Schema Deletion
Published
2021-10-29
Title
Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS
Published
2026-09-10
Title
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
Published
2026-09-28
Title
WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
Published
2026-06-04
Title
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking