Skip to content
OpenAdvisories

Vendor

Uncanny Owl

33 known vulnerabilities.

Products

Uncanny Toolkit for LearnDash 8 Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin 8 Uncanny Automator 6 Uncanny Automator Pro 4 Uncanny Toolkit Pro for LearnDash 3 Uncanny Groups for LearnDash 2 Tin Canny Reporting for LearnDash 1 Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-65555

    WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.

    Uncanny Owl Uncanny Toolkit for LearnDash
  • Critical 9.8
    CVE-2026-119096

    Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter

    The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which the plugin'…

    Uncanny Owl Uncanny Toolkit for LearnDash Web / CMS
  • Critical 9.8
    CVE-2026-56057

    WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.

    Uncanny Owl Uncanny Automator Pro
  • Critical 9.1
    CVE-2025-3623

    Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function

    The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automator_api_decode_message() function. This makes it possible for unauthenticated to…

    Uncanny Owl Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin Web / CMS