What’s Vulnerable › Products

Uncanny Toolkit for LearnDash vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Uncanny Toolkit for LearnDash version is affected

Latest Uncanny Toolkit for LearnDash vulnerabilities

• CVE-2026-107128 — Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization (CVSS 5.0)
• CVE-2026-107127 — Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF (CVSS 7.5)