PT-2026-136028

CVE-2026-106004

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
CVE-2026-106004
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com