Medium · 5.4 CVE-2024-37439 EUVD-2024-36665GHSA-f927-c8m5-jh63

WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Uncanny Owl Product: Uncanny Toolkit Pro for LearnDash

Description

Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0

Affected products

Vendor	Product	Affected	Fixed
Uncanny Owl	Uncanny Toolkit Pro for LearnDash	≤ 4.1.4.0	—

References

https://patchstack.com/database/vulnerability/uncanny-toolkit-pro/wordpress-uncanny-toolkit-pro-for-learndash-plugin-4-1-4-1-subscriber-arbitrary-post-page-duplication-vulnerability?_s_id=cve vdb-entry