Medium · 6.5 CVE-2023-34019 EUVD-2023-38143GHSA-8f7g-f5q3-fc3x

WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Uncanny Owl Product: Uncanny Toolkit for LearnDash

Description

Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.

Affected products

Vendor	Product	Affected	Fixed
Uncanny Owl	Uncanny Toolkit for LearnDash	≤ 3.6.4.3	—

References

https://patchstack.com/database/wordpress/plugin/uncanny-learndash-toolkit/vulnerability/wordpress-uncanny-toolkit-for-learndash-plugin-3-6-4-3-broken-access-control-vulnerability?_s_id=cve vdb-entry