Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Uncanny Toolkit for LearnDash 3.8.2 Clear all filters
TI-2026-78605 CVE-2026-107128 · GHSA-797j-vc38-j7h4

Uncanny Toolkit for LearnDash: subsite admins lock out users

Priority LOW 23

The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator…

CVSS 3.1MEDIUM 5.0 Network High privileges No interaction EPSS 0.0028 Published 2026-10-21 Fixed in 3.8.2 CWE-863
TI-2026-78604 CVE-2026-107127 · GHSA-rhpw-r9mr-g89c

CSRF in Uncanny Toolkit for LearnDash allows account takeover

Priority LOW 34

The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a passwo…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00166 Published 2026-10-21 Fixed in 3.8.2 CWE-352