CVE-2026-11355

Name of the Vulnerable Software and Affected Versions DT LMS – elearning versions prior to 1.2

Description The DT LMS – elearning WordPress plugin allows unauthenticated attackers to modify arbitrary plugin option values in the wp options table. This is caused by a missing capability check and lack of nonce verification in multiple AJAX handlers, including dtlms save poc settings, dtlms save skin settings, and dtlms save options settings. These handlers are registered on the wp ajax nopriv * hook and pass user-supplied data directly to the update option() function. An attacker can exploit this to overwrite Point-of-Contact email configurations and skin or branding settings, altering the appearance and behavior of the LMS for all visitors.

Recommendations Update the plugin to a version later than 1.1. As a temporary mitigation, restrict access to the dtlms save poc settings, dtlms save skin settings, and dtlms save options settings AJAX handlers.