Uncanny Owl Vulnerabilities and Affected Products
Vulnerabilities associated with Uncanny Automator Pro.
Products
Clear product- Uncanny Toolkit for LearnDash6 vulnerabilities
- Uncanny Automator5 vulnerabilities
- Uncanny Automator Pro4 vulnerabilities
- Uncanny Toolkit Pro for LearnDash3 vulnerabilities
- Uncanny Groups for LearnDash2 vulnerabilities
- Tin Canny Reporting for LearnDash1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-56057CRITICAL | WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerabilitySubscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. CWE-502Jun 26, 2026 | CVSS9.8v3.1 | EPSS0.414% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-37119MEDIUM | WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerabilityMissing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0. CWE-862Nov 1, 2024 | CVSS5.3v3.1 | EPSS0.547% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-37117HIGH | WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Automator Pro allows Reflected XSS.This issue affects Uncanny Automator Pro: from n/a through 5.3. CWE-79Jul 22, 2024 | CVSS7.1v3.1 | EPSS0.327% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-37118MEDIUM | WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerabilityCross Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Automator Pro.This issue affects Uncanny Automator Pro: from n/a through 5.3. CWE-352Jun 21, 2024 | CVSS5.4v3.1 | EPSS0.202% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |