Uncanny Owl
- Total products in the ecosystem
- 5
- Total vulnerabilities (90 days)
- 2
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/09/2026, Uncanny Owl recorded 2 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Uncanny Automator had the most security vulnerabilities in the Uncanny Owl ecosystem, with 1 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-65555WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerabilityCVE-2026-120846WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerabilityCVE-2026-65462WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerabilityCVE-2026-56057WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerabilityCVE-2026-56031WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-65555WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability | Exploitation statusNot exploited | FixYes |
| Affected productUncanny Toolkit for LearnDash |
| Published11/04/2026 |
| SeverityCritical |
CVE-2026-120846WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability | Exploitation statusNot confirmed | FixYes | Affected productUncanny Automator | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-65462WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator | Published07/23/2026 | SeverityHigh |
|---|
CVE-2026-56057WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator Pro | Published06/26/2026 | SeverityCritical |
|---|
CVE-2026-56031WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator | Published06/26/2026 | SeverityHigh |
|---|
CVE-2025-66056WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator | Published11/21/2025 | SeverityMedium |
|---|
CVE-2025-57988WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit for LearnDash | Published09/22/2025 | SeverityMedium |
|---|
CVE-2025-58193WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator | Published08/27/2025 | SeverityMedium |
|---|
CVE-2025-48133WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator | Published06/05/2025 | SeverityMedium |
|---|
CVE-2025-48080WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit for LearnDash | Published05/16/2025 | SeverityMedium |
|---|
CVE-2025-22268WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit for LearnDash | Published04/15/2025 | SeverityMedium |
|---|
CVE-2024-37438WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit Pro for LearnDash | Published01/02/2025 | SeverityMedium |
|---|
CVE-2023-34019WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability | Exploitation statusActively exploited | FixYes | Affected productUncanny Toolkit for LearnDash | Published12/13/2024 | SeverityMedium |
|---|
CVE-2024-37439WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit Pro for LearnDash | Published11/01/2024 | SeverityMedium |
|---|
CVE-2024-37119WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator Pro | Published11/01/2024 | SeverityMedium |
|---|
CVE-2024-8350Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add | Exploitation statusNot exploited | FixYes | Affected productUncanny Groups for LearnDash | Published09/25/2024 | SeverityLow |
|---|
CVE-2024-8349Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation | Exploitation statusNot exploited | FixYes | Affected productUncanny Groups for LearnDash | Published09/25/2024 | SeverityHigh |
|---|
CVE-2024-37436WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit Pro for LearnDash | Published07/22/2024 | SeverityHigh |
|---|
CVE-2024-37117WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator Pro | Published07/22/2024 | SeverityHigh |
|---|
CVE-2024-37118WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Automator Pro | Published06/21/2024 | SeverityMedium |
|---|
CVE-2023-34020WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit for LearnDash | Published03/27/2024 | SeverityMedium |
|---|
CVE-2023-23714WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productUncanny Toolkit for LearnDash | Published05/26/2023 | SeverityMedium |
|---|
22 Results | Page 1 of 1