UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-106004
The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-03T09:09:29.727185+00:00
- Cve id
- CVE-2026-106004
- First seen by Signal
- 2026-11-03T09:06:03+00:00
- Retrieved at
- 2026-11-03T09:10:37+00:00
- Published at
- 2026-11-03T06:17:37.640
- Last modified
- 2026-11-03T06:17:37.640
Explore deeper with Ninja Signal's threat intelligence graph