UNKNOWN NVD

CVE-2026-106004

The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke an

The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status.

References

https://wpscan.com/vulnerability/f2a87670-ddbd-455b-884f-9b710d3bb600/

Published: 2026-11-03 · Source: NVD · Feed updated: 2026-11-03

This unknown severity vulnerability was published on 2026-11-03 via NVD.

vulnfeed aggregates 18371 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.