What’s Vulnerable › Products

Uncanny Owl Uncanny Toolkit for LearnDash vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Uncanny Owl Uncanny Toolkit for LearnDash version is affected

Latest Uncanny Owl Uncanny Toolkit for LearnDash vulnerabilities

• CVE-2026-119096 — Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter (CVSS 9.8)
• CVE-2025-57988 — WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-48080 — WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-22268 — WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2023-34019 — WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2023-34020 — WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability (CVSS 6.1)
• CVE-2023-23714 — WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)