CVE-2026-105993

None

CVSS

—

EPSS

0.1%

Published

Nov 3, 2026

CISA due date

—

The record

The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.

Affected packages

Ecosystem	Package	Introduced	Fixed