The vulnerability resides in the DT LMS WordPress plugin (versions up to 1.2), where an AJAX action lacks proper capability or nonce verification. As a result, an attacker who has no authentication credentials can request the revocation of any learner's course or class completion status, effectively deleting or altering learning records. This represents an unauthorized change that compromises data integrity and potentially invalidates certification or progress tracking.

Affected product is the DT LMS WordPress plugin through version 1.2. All users who have installed DT LMS 1.2 or earlier on a WordPress site are at risk. No specific environment or configuration constraints are noted beyond the presence of the plugin.

The attack vector is likely via an unauthenticated HTTP request to the plugin’s AJAX endpoint. Exploitability is straightforward because no authentication or nonce checks are performed. The lack of an EPSS score or KEV listing suggests limited public data, but the vulnerability remains significant because it can be performed by any internet user with knowledge of the endpoint, and it can affect all enrolled learners. The severity was not quantified in the supplied data, so the impact should be treated as potentially high.