Skip to content
Uncannyowl vulnerabilities
Newest
-
uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 more
Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter
CVE-2026-119096
9.8 Critical
-
uncannyowl uncanny automator – ai + automation for wordpress | ai agent, ai page builder, free ai usage included
Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion
CVE-2026-82627
7.5 High
-
uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
CVE-2026-15025
7.5 High
-
uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin
Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
CVE-2026-15008
8.1 High
-
uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
CVE-2026-2269
7.2 High
-
uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-15522
6.4 Medium
-
uncanny owl automator, uncannyowl uncanny automator +1 more
WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability
CVE-2025-48133
6.5 Medium
-
uncannyowl uncanny automator, uncanny automator – easy automation, integration, webhooks & workflow builder plugin +1 more
Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
CVE-2025-4520
5.4 Medium
-
uncannyowl uncanny automator, uncanny automator – easy automation, integration, webhooks & workflow builder plugin +1 more
Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
CVE-2025-3623
9.1 Critical
-
uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin, uncanny automator +1 more
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
CVE-2025-2075
8.8 High
-
uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin, uncanny automator +1 more
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
CVE-2024-13838
5.5 Medium
-
uncanny owl automator pro, uncannyowl uncanny automator +1 more
WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability
CVE-2024-37119
5.3 Medium
-
uncanny owl toolkit pro for learndash, uncannyowl uncanny toolkit pro for learndash +1 more
WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability
CVE-2024-37439
5.4 Medium
-
uncanny owl groups for learndash, uncannyowl uncanny groups for learndash +1 more
Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
CVE-2024-8350
2.7 Low
-
uncanny owl groups for learndash, uncannyowl uncanny groups for learndash +1 more
Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation
CVE-2024-8349
Public exploit
7.2 High
-
uncanny owl automator pro, uncannyowl uncanny automator +1 more
WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37117
7.1 High
-
uncanny owl automator pro, uncannyowl uncanny automator +1 more
WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability
CVE-2024-37118
5.4 Medium
-
uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 more
WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability
CVE-2023-34020
4.7 Medium
-
uncanny automator, uncanny owl automator – automate everything with the #1 no-code automation and integration plugin, uncannyowl uncanny automator +1 more
WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure
CVE-2023-52151
5.3 Medium
-
uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 more
WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-23714
4.3 Medium
-
uncannyowl tin canny reporting for learndash
Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting...
CVE-2020-9439
6.1 Medium
-
uncannyowl uncanny groups for learndash
Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7...
CVE-2020-35650
6.1 Medium