What is GHSA-8rjq-x73f-6p5g?

GHSA-8rjq-x73f-6p5g is a security advisory published by GitHub Security Advisories with unknown severity. The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of...

Which CVE IDs does GHSA-8rjq-x73f-6p5g cover?

GHSA-8rjq-x73f-6p5g covers the following CVE IDs: CVE-2026-106004. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-8rjq-x73f-6p5gunknown

The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of...

Vendor

GitHub Security Advisories

Published

November 3, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-106004 →

📋 Description

The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106004
https://wpscan.com/vulnerability/f2a87670-ddbd-455b-884f-9b710d3bb600
https://github.com/advisories/GHSA-8rjq-x73f-6p5g