CVE-2026-106004

The DT LMS WordPress plugin (versions through 1.2 ) is vulnerable to unauthenticated arbitrary course completion revocation . The root cause is a failure to perform capability or nonce checks on a specific AJAX action . This flaw allows an unauthenticated attacker to revoke the course and class c...