Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Uncanny Owl Component: Uncanny Groups For Learndash Clear all filters
TI-2024-07743 CVE-2024-8350 · GHSA-3522-f7v7-pv57

Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add

Priority LOW 14

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including,…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00427 Published 2024-09-25 No fix listed CWE-862
TI-2020-18128 CVE-2020-35650 · GHSA-v9vh-7cjg-2wjm

Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgm_code_redeem POST Parameter in user-…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2020-12-23 No fix listed CWE-79