Log in Start free

Uncanny Owl

Products

ProductCVEsExploitedLatest
Uncanny Toolkit for LearnDash7–Nov 4, 2026
Uncanny Automator6–Nov 3, 2026
Uncanny Automator Pro4–Jun 26, 2026
Uncanny Toolkit Pro for LearnDash3–Jan 2, 2025
Uncanny Groups for LearnDash2–Sep 25, 2024
Tin Canny Reporting for LearnDash1–Aug 1, 2024

Exploited and recent CVEs

  • CVE-2026-65555 Critical 9.8 WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-120846 Medium 5.3 WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-65462 High 7.6 WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability 0.4%
  • CVE-2026-56057 Critical 9.8 WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-56031 High 8.1 WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-66056 Medium 4.3 WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-57988 Medium 6.5 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58193 Medium 4.3 WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-48133 Medium 6.5 WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-48080 Medium 6.5 WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-22268 Medium 6.5 WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37438 Medium 5.4 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-34019 Medium 6.5 WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability 0.6%
  • CVE-2024-37119 Medium 5.3 WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability 0.5%
  • CVE-2024-37439 Medium 5.4 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability 0.4%
  • CVE-2024-8350 Low 2.7 Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add 0.4%
  • CVE-2024-8349 High 7.2 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation 1.2%
  • CVE-2024-39656 High 7.1 WordPress Tin Canny Reporting for LearnDash plugin <= 4.3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37117 High 7.1 WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37436 High 7.1 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37118 Medium 5.4 WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability 0.2%
  • CVE-2023-34020 Medium 4.7 WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability 1.0%
  • CVE-2023-23714 Medium 4.3 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%