Vulnerability · Published Sep 25, 2024 · Assigned by Wordfence
CVE-2024-8350Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
Low 2.7
In plain English
A low-severity missing authorization in Uncanny Groups for LearnDash from Uncanny Owl. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group leader-level access and above, to add users to their group which ultimately allows them to leverage CVE-2024-8349 and gain admin access to the site.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Uncanny Owl | Uncanny Groups for LearnDash | 0 – through 6.1.0.1 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N