Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-37438 EUVD-2024-36926GHSA-6crw-h5cj-4wrx

WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 2, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1.

Affected products

VendorProductAffectedFixed
Uncanny Owl Uncanny Toolkit Pro for LearnDash < 4.1.4.1 4.1.4.1

References