Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-02
Uncanny Toolkit for LearnDash - Security Vulnerability (CVE-2026-119096)
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which the plugin's account-verification gate resolves the submitted `email` value using the raw, unsanitized string passed to `get_user_by()`, while the subsequent `wp_signon()` call relies on WordPress core's internal `sanitize_user()` to strip appended junk characters — causing the gate lookup to fail and be skipped entirely while the real account is still resolved and authenticated.…
PLUGIN
Uncanny Toolkit for LearnDash
CVE-2026-119096
Risk Score
Threat Entry
Updated 2026-06-17
Uncanny Toolkit For Learndash - Open Redirect (CVE-2023-34020)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.
PLUGIN
Uncanny Toolkit For Learndash
CVE-2023-34020
Risk Score
Threat Entry
Updated 2026-06-17
Uncanny Toolkit For Learndash - Cross-Site Request Forgery (CSRF) (CVE-2023-23714)
Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash plugin
PLUGIN
Uncanny Toolkit For Learndash
CVE-2023-23714
Risk Score