The DT LMS – elearning plugin allows unauthenticated users to send AJAX requests that are handled by functions that omit capability checks, nonce verification, and pass user‑supplied data directly to update_option(). This flaw lets an attacker overwrite any plugin setting stored in the wp_options table, such as contact emails, branding images, or skin choices. The attacker can therefore alter the appearance and communication behavior of the LMS for all visitors without logging in.

The vendor is DesignThemes and the product is the DT LMS – elearning WordPress LMS Plugin. Versions up to and including 1.1 are vulnerable. WordPress sites that have this plugin installed at those versions are affected. No newer plugin versions are reported to be vulnerable.

The CVSS score of 5 severity range, while the EPSS score of less than 1% indicates a low probability of widespread exploitation at present. The vulnerability is not listed in the C vector is unauthenticated and requires no user privilege, an attacker only needs to send crafted HTTP requests to the vulnerable AJAX endpoints to experience the impact for all site visitors.