Uncanny Toolkit for LearnDash vulnerabilities
We track 1 vulnerability in Uncanny Toolkit for LearnDash products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Uncanny Toolkit for LearnDash vulnerabilities
- 7.5 High severity
Uncanny Toolkit for LearnDash: Cross-Site Request Forgery
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a password reset to an attacker-chosen value thr