Threats tagged 'ghsa-c7cc-xqvj-xcq2'

The Uncanny Toolkit for LearnDash WordPress plugin versions up to and including 3.8.2 contains an authentication bypass vulnerability via the email parameter in the uo_login_action() function. This flaw allows attackers to bypass account verification and suspension controls by exploiting inconsistent input sanitization between user lookup and authentication. Attackers with valid credentials for unverified or suspended accounts can obtain a valid session cookie without proper approval. The required nonce for exploitation is publicly accessible, making the attack trivial for anyone with network access and knowledge of the target credentials.