Approved changes feed: RSS · Atom

cpe:2.3:a:uncanny_owl:uncanny_toolkit_pro_for_learndash:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUncanny Owl (8aac8cb2-6e81-515f-9257-0c6e5838f7c7)
ProductUncanny Toolkit Pro For Learndash (67ddb835-c834-58df-b66f-2dfeae0238da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37439 vulnerable 2026-06-08 06:39:47.576030 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0
Published: 2024-11-01T14:18:23.040Z
Updated: 2026-04-28T16:09:58.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37438 vulnerable 2026-06-08 06:39:47.574002 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1.
Published: 2025-01-02T13:31:11.063Z
Updated: 2026-04-28T16:09:59.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37436 vulnerable 2026-06-08 06:39:47.570799 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Reflected XSS.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1.
Published: 2024-07-22T08:16:24.497Z
Updated: 2026-04-28T16:09:58.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.