4 matches found
CVE-2026-105993 DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update
The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options...
CVE-2026-105993
The DT Directory Lite Addon WordPress plugin, affecting versions through 1.1 , is vulnerable to an unauthenticated plugin settings update . The root cause is a failure to perform nonce or capability checks on its settings handlers. This flaw allows unauthenticated attackers to modify the plugin's...
EUVD-2026-115679
The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options...
WordPress GRAND Flash Album Gallery SQL Injection / Disclosure / File Overwrite
waraxe-2012-SA094 - Multiple Vulnerabilities in Wordpress GRAND Flash Album Gallery Plugin ============================================================================================= Author: Janek Vind "waraxe" Date: 24. October 2012 Location: Estonia, Tartu Web:...