Skip to content
OpenAdvisories

Product · Uncanny Owl

Uncanny Groups for LearnDash

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-8349 Public exploit

    Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

    The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authen…