THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-11355 (MEDIUM 5.3) — The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms_save_poc_settings, dtlms_save_skin_settings, and dtlms_save_options_settings) in versions up

[NVD] CVE-2026-11355 (MEDIUM 5.3) — The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms_save_poc_settings, dtlms_save_skin_settings, and dtlms_save_options_settings) in versions up

mednvdPublished 2026-09-12

CVE-2026-11355 CVSS: 5.3 MEDIUM Published: 2026-09-12T08:16:22.523

The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms_save_poc_settings, dtlms_save_skin_settings, and dtlms_save_options_settings) in versions up to, and including, 1.1. These handlers are registere

Indicators of compromise

CVE-2026-11355cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-11355