Read the docs

Uncanny Owl

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Uncanny Owl records in CISA KEV

No Uncanny Owl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uncanny Automator 9 records MEDIUM Uncanny Groups For Learndash 3 records LOW Uncanny Toolkit For Learndash 2 records LOW Tin Canny Reporting For Learndash 1 record LOW

Records

3 records in Uncanny Groups For Learndash · all components

TI-2020-18128 CVE-2020-35650 · GHSA-v9vh-7cjg-2wjm

Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgm_code_redeem POST Parameter in user-…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2020-12-23 No fix listed CWE-79
TI-2024-07743 CVE-2024-8350 · GHSA-3522-f7v7-pv57

Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add

Priority LOW 14

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including,…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00427 Published 2024-09-25 No fix listed CWE-862
Open these records in search →