CVE-2026-11355

The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms save poc settings, dtlms save skin settings, and dtlms save options settings) in versions up to, and including, 1.1. These handlers are registered on the wp ajax nopriv * hook and contain no capability check, no nonce verification, and pass user-supplied data directly to update option(). This makes it possible for unauthenticated attackers to overwrite arbitrary plugin option values stored in the wp options table, including Point-of-Contact email configuration and skin/branding settings, which can be used to alter the appearance and behavior of the LMS for all site visitors.