Uncanny Toolkit for LearnDash

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Uncanny Toolkit for LearnDash

Information

Software Type Plugin
Software Slug uncanny-learndash-toolkit (view on wordpress.org)
Software Status Active
Software Author uncannyowl
Software Website www.uncannyowl.com
Software Downloads 909,212
Software Active Installs 20,000
Software Record Last Updated July 22, 2026

7 Vulnerabilities

Submit a Vulnerability
Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-57988
Sep 22, 2025
Researcher: zaim
Uncanny Toolkit for LearnDash <= 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-48080
May 16, 2025
Researcher: zaim
Uncanny Toolkit for LearnDash <= 3.7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-22268
Apr 11, 2025
Researcher: zaim
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route
6.5
CVE-2023-34019
Jun 2, 2023
Researcher: Kévin Mosbahi (Mika)
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect
4.3
CVE-2023-34020
Jun 1, 2023
Researcher: Kévin Mosbahi (Mika)
Uncanny Toolkit for LearnDash <= 3.6.4.1 - Cross-Site Request Forgery to Arbitrary Plugin Install and Activation
8.8
CVE-2023-23714
Jan 27, 2023
Researcher: István Márton
Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery
8.8
CVE ID Unknown
Nov 26, 2022
Researchers:
Title Status CVE ID CVSS Researchers Date
Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-57988 6.4 zaim September 22, 2025
Uncanny Toolkit for LearnDash <= 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-48080 6.4 zaim May 16, 2025
Uncanny Toolkit for LearnDash <= 3.7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-22268 6.4 zaim April 11, 2025
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route Patched CVE-2023-34019 6.5 Kévin Mosbahi (Mika) June 2, 2023
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect Patched CVE-2023-34020 4.3 Kévin Mosbahi (Mika) June 1, 2023
Uncanny Toolkit for LearnDash <= 3.6.4.1 - Cross-Site Request Forgery to Arbitrary Plugin Install and Activation Patched CVE-2023-23714 8.8 István Márton January 27, 2023
Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery Patched 8.8 November 26, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation