Uncanny Groups For Learndash
Approved changes feed: RSS · Atom
cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Uncannyowl (bbd8a433-cc82-5966-9d7d-d9b0c375bc34) |
|---|---|
| Product | Uncanny Groups For Learndash (1ff98899-d5bb-58fc-93a6-0cc9989e8326) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8350 |
vulnerable | 2026-06-08 07:00:24.313924 |
Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
LOW (2.7)
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group leader-level access and above, to add users to their group which ultimately allows them to leverage CVE-2024-8349 and gain admin access to the site.
Published: 2024-09-25T02:32:26.514Z
Updated: 2026-04-08T17:12:53.090Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8349 |
vulnerable | 2026-06-08 07:00:24.313360 |
Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation
HIGH (7.2)
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group leader-level access and above, to change admin account email addresses which can subsequently lead to admin account access.
Published: 2024-09-25T02:32:25.610Z
Updated: 2026-04-08T16:57:38.807Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.