Uncanny Owl vulnerabilities
We track 6 vulnerabilities in Uncanny Owl products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Uncanny Owl vulnerabilities
- 9.8 Critical severity
Uncanny Toolkit for LearnDash: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.
- 9.8 Critical severity
Uncanny Automator: Missing Authorization
Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through <= 6.4.0.2.
- 9.8 Critical severity
Uncanny Automator Pro: Missing Authorization
Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0.
- 7.2 High severity
Uncanny Groups for LearnDash: Missing Authorization
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authent
- 7.1 High severity
Tin Canny Reporting for LearnDash: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Tin Canny Reporting for LearnDash allows Reflected XSS.This issue affects Tin Canny Reporting for LearnDash: from n/a through 4.3.0.7.
- 7.1 High severity
Uncanny Toolkit Pro for LearnDash: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Reflected XSS.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1.