Uncanny Owl Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Uncanny Toolkit for LearnDash6 vulnerabilities
Uncanny Automator5 vulnerabilities
Uncanny Automator Pro4 vulnerabilities
Uncanny Toolkit Pro for LearnDash3 vulnerabilities
Uncanny Groups for LearnDash2 vulnerabilities
Tin Canny Reporting for LearnDash1 vulnerability

Uncanny Owl vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2024-37438MEDIUM	WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1. CWE-352Jan 2, 2025	CVSS5.4v3.1	EPSS0.171%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-37439MEDIUM	WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0 CWE-862Nov 1, 2024	CVSS5.4v3.1	EPSS0.387%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-37436HIGH	WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Reflected XSS.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1. CWE-79Jul 22, 2024	CVSS7.1v3.1	EPSS0.271%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX