Skip to content
OpenAdvisories

Vendor

Uncanny Owl

33 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.7

    Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add

    The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for au…