Advisories · Technology

Uncanny Owl Uncanny Toolkit for LearnDash.

Every CVE that names Uncanny Owl Uncanny Toolkit for LearnDash among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65555 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability
- Uncanny Owl Uncanny Toolkit for LearnDash
- Privilege escalation
Not analysed yet 4 Nov 2026
CVE-2025-57988 CVE record

CVSS 6.5 Medium

WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability
- Uncanny Owl Uncanny Toolkit for LearnDash
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025
CVE-2025-48080 CVE record

CVSS 6.5 Medium

WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability
- Uncanny Owl Uncanny Toolkit for LearnDash
- Cross-site scripting (XSS)
Not analysed yet 16 May 2025
CVE-2025-22268 CVE record

CVSS 6.5 Medium

WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.1 - Cross Site Scripting (XSS) vulnerability
- Uncanny Owl Uncanny Toolkit for LearnDash
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2025
CVE-2023-34019 CVE record

CVSS 6.5 Medium

WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability
- Uncanny Owl Uncanny Toolkit for LearnDash
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2023-34020 CVE record

CVSS 4.7 Medium

WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability
- Uncanny Owl Uncanny Toolkit for LearnDash
- Open redirect
Not analysed yet 27 Mar 2024
CVE-2023-23714 CVE record

CVSS 4.3 Medium

WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
- Uncanny Owl Uncanny Toolkit for LearnDash
- Cross-site request forgery (CSRF)
Not analysed yet 26 May 2023