CVE-2026-105993

{
  "etk_id": "ETK-2026-3343",
  "cve_id": "CVE-2026-105993",
  "display_id": "CVE-2026-105993",
  "ghsa_id": "GHSA-mgcf-822r-c8hf",
  "euvd_id": "EUVD-2026-115679",
  "status": "in_pipeline",
  "anchor_state": "anchored",
  "title": "Unauthenticated settings modification in DT Directory Lite Addon",
  "summary": "DT Directory Lite Addon for WordPress is affected through version 1.1. An unauthenticated remote attacker may alter the plugin's configuration and skin options because settings requests are not adequately validated. Exploitation requires the plugin's vulnerable settings handlers to be reachable.",
  "mitigation": "Deactivate and remove DT Directory Lite Addon version 1.1 or earlier until a vendor-fixed release is available and verified. Restrict public access to the WordPress site and administrative endpoints where feasible to reduce exposure.",
  "vendor": null,
  "product": "DT Directory Lite Addon",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.1"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "DT Directory Lite Addon",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": null,
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": null,
  "t0_at": "2026-11-03T06:00:23.072000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-03T06:00:23.072000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-03T06:00:23.072000+00:00",
      "url": "https://github.com/advisories/GHSA-mgcf-822r-c8hf"
    }
  }
}