Uncanny Owl vulnerabilities

Products

• Toolkit For Learndash 10
• Automator 6
• Automator Pro 4
• Toolkit Pro For Learndash 3
• Groups For Learndash 2

Newest

• uncanny owl toolkit for learndash WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability CVE-2026-65555 9.8 CriticalNovember 4, 2026
• uncanny owl automator WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability CVE-2026-120846 5.3 MediumNovember 3, 2026
• uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 more Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter CVE-2026-119096 9.8 CriticalOctober 31, 2026
• uncanny owl toolkit for learndash, unknown uncanny toolkit for learndash +1 more Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization CVE-2026-107128 5.0 MediumOctober 21, 2026
• uncanny owl toolkit for learndash, unknown uncanny toolkit for learndash +1 more Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF CVE-2026-107127 7.5 HighOctober 21, 2026
• uncanny owl automator WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability CVE-2026-65462 7.6 HighJuly 23, 2026
• uncanny owl automator pro WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerability CVE-2026-56057 9.8 CriticalJune 26, 2026
• uncanny owl automator WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability CVE-2026-56031 8.1 HighJune 26, 2026
• uncanny owl automator WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability CVE-2025-66056 4.3 MediumNovember 21, 2025
• uncanny owl toolkit for learndash WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-57988 6.5 MediumSeptember 22, 2025
• uncanny owl automator WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability CVE-2025-58193 4.3 MediumAugust 27, 2025
• uncanny owl automator, uncannyowl uncanny automator +1 more WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability CVE-2025-48133 6.5 MediumJune 5, 2025
• uncanny owl toolkit for learndash WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48080 6.5 MediumMay 16, 2025
• uncanny owl toolkit for learndash WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-22268 6.5 MediumApril 15, 2025
• uncanny owl toolkit pro for learndash WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37438 5.4 MediumJanuary 2, 2025
• uncanny owl toolkit for learndash WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability CVE-2023-34019 6.5 MediumDecember 13, 2024
• uncanny owl automator pro, uncannyowl uncanny automator +1 more WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability CVE-2024-37119 5.3 MediumNovember 1, 2024
• uncanny owl toolkit pro for learndash, uncannyowl uncanny toolkit pro for learndash +1 more WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability CVE-2024-37439 5.4 MediumNovember 1, 2024
• uncanny owl groups for learndash, uncannyowl uncanny groups for learndash +1 more Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add CVE-2024-8350 2.7 LowSeptember 25, 2024
• uncanny owl groups for learndash, uncannyowl uncanny groups for learndash +1 more Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation CVE-2024-8349 Public exploit 7.2 HighSeptember 25, 2024
• uncanny owl tin canny reporting for learndash WordPress Tin Canny Reporting for LearnDash plugin <= 4.3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-39656 7.1 HighAugust 1, 2024
• uncanny owl automator pro, uncannyowl uncanny automator +1 more WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37117 7.1 HighJuly 22, 2024
• uncanny owl toolkit pro for learndash WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37436 7.1 HighJuly 22, 2024
• uncanny owl automator pro, uncannyowl uncanny automator +1 more WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability CVE-2024-37118 5.4 MediumJune 21, 2024
• uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 more WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability CVE-2023-34020 4.7 MediumMarch 27, 2024
• uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 more WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23714 4.3 MediumMay 26, 2023