Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-04
Uncanny Learndash Toolkit - Security Vulnerability (CVE-2026-65555)
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.
PLUGIN
Uncanny Learndash Toolkit
CVE-2026-65555
Risk Score
Threat Entry
Updated 2026-11-02
Uncanny Learndash Toolkit - Security Vulnerability (CVE-2026-119096)
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which the plugin's account-verification gate resolves the submitted `email` value using the raw, unsanitized string passed to `get_user_by()`, while the subsequent `wp_signon()` call relies on WordPress core's internal `sanitize_user()` to strip appended junk characters — causing the gate lookup to fail and be skipped entirely while the real account is still resolved and authenticated.…
PLUGIN
Uncanny Learndash Toolkit
CVE-2026-119096
Risk Score
Threat Entry
Updated 2026-06-17
Uncanny Learndash Toolkit - Cross-Site Scripting (XSS) (CVE-2025-57988)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through
PLUGIN
Uncanny Learndash Toolkit
CVE-2025-57988
Risk Score
Threat Entry
Updated 2026-06-17
Uncanny Learndash Toolkit - Cross-Site Scripting (XSS) (CVE-2025-48080)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through
PLUGIN
Uncanny Learndash Toolkit
CVE-2025-48080
Risk Score
Threat Entry
Updated 2026-06-17
Uncanny Learndash Toolkit - Cross-Site Scripting (XSS) (CVE-2025-22268)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through
PLUGIN
Uncanny Learndash Toolkit
CVE-2025-22268
Risk Score
Threat Entry
Updated 2026-06-17
Uncanny Learndash Toolkit - Broken Access Control (CVE-2023-34019)
Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.
PLUGIN
Uncanny Learndash Toolkit
CVE-2023-34019
Risk Score