Unknown Uncanny Toolkit for LearnDash

• CVE-2026-107128 Medium 5.0 Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization 0.3%
• CVE-2026-107127 High 7.5 Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF 0.2%