Uncanny Owl vulnerabilities and threats

17 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.4%	CVE-2026-65462Uncanny Automator (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2026-07-23CVE Database V5CVE-2026-65462 Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions. EPSS 0.4%Vulnerability Uncanny Owl CWE-89	CVE Database V5	2026-07-23
Critical	9.8	EPSS 0.6%	CVE-2026-56057Uncanny Automator Pro (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-06-26CVE Database V5CVE-2026-56057 Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. EPSS 0.6%Vulnerability Uncanny Owl CWE-502	CVE Database V5	2026-06-26
High	8.1	EPSS 0.4%	CVE-2026-56031Uncanny Automator (WordPress plugin) · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-26CVE Database V5CVE-2026-56031 Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. EPSS 0.4%Vulnerability Uncanny Owl CWE-502	CVE Database V5	2026-06-26
Medium	4.3	EPSS 0.3%	CVE-2025-66056Uncanny Automator (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium4.3EPSS 0.3%2025-11-21CVE Database V5CVE-2025-66056 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Retrieve Embedded Sensitive Data.This issue affects Uncanny Automator: from n/a through < 6.10.0. EPSS 0.3%Vulnerability Uncanny Owl CWE-497	CVE Database V5	2025-11-21
Medium	6.5	EPSS 0.2%	CVE-2025-57988Uncanny Toolkit for LearnDash (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-57988 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through <= 3.7.0.3. EPSS 0.2%Vulnerability Uncanny Owl	CVE Database V5	2025-09-22
Medium	4.3	EPSS 0.2%	CVE-2025-58193Uncanny Automator (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-08-27CVE Database V5CVE-2025-58193 Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through <= 6.7.0.1. EPSS 0.2%Vulnerability Uncanny Owl	CVE Database V5	2025-08-27
Medium	6.5	EPSS 0.3%	CVE-2025-48133Uncanny Automator (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-06-05CVE Database V5CVE-2025-48133 Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through <= 6.4.0.2. EPSS 0.3%Vulnerability Uncanny Owl	CVE Database V5	2025-06-05
Medium	6.5	EPSS 0.3%	CVE-2025-22268Uncanny Toolkit for LearnDash (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-04-15CVE Database V5CVE-2025-22268 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through <= 3.7.0.1. EPSS 0.3%Vulnerability Uncanny Owl	CVE Database V5	2025-04-15
Medium	5.4	EPSS 0.2%	CVE-2024-37438Uncanny Toolkit Pro for LearnDash (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37438 Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1. EPSS 0.2%Vulnerability Uncanny Owl CWE-352	CVE Database V5	2025-01-02
Medium	5.3	EPSS 0.5%	CVE-2024-37119Uncanny Automator Pro (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.5%2024-11-01CVE Database V5CVE-2024-37119 Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0. EPSS 0.5%Vulnerability Uncanny Owl CWE-862	CVE Database V5	2024-11-01
Medium	5.4	EPSS 0.4%	CVE-2024-37439Uncanny Toolkit Pro for LearnDash (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.4%2024-11-01CVE Database V5CVE-2024-37439 Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0 EPSS 0.4%Vulnerability Uncanny Owl CWE-862	CVE Database V5	2024-11-01
Low	2.7	EPSS 0.4%	CVE-2024-8350Uncanny Groups for LearnDash (WordPress plugin) · Missing Authorization Low2.7EPSS 0.4%2024-09-25CVE Database V5CVE-2024-8350 The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group leader-level access and above, to add users to their group which ultimately allows them to leverage CVE-2024-8349 and gain admin access to the site. EPSS 0.4%Vulnerability Uncanny Owl CWE-862	CVE Database V5	2024-09-25
High	7.2	EPSS 1.2%	CVE-2024-8349Uncanny Groups for LearnDash (WordPress plugin) · Missing Authorization High7.2EPSS 1.2%2024-09-25CVE Database V5CVE-2024-8349 The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group leader-level access and above, to change admin account email addresses which can subsequently lead to admin account access. EPSS 1.2%Vulnerability Uncanny Owl CWE-862	CVE Database V5	2024-09-25
High	7.1	EPSS 0.3%	CVE-2024-39656Tin Canny Reporting for LearnDash (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39656 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Tin Canny Reporting for LearnDash allows Reflected XSS.This issue affects Tin Canny Reporting for LearnDash: from n/a through 4.3.0.7. EPSS 0.3%Vulnerability Uncanny Owl CWE-79	CVE Database V5	2024-08-01
High	7.1	EPSS 0.3%	CVE-2024-37117Uncanny Automator Pro (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-07-22CVE Database V5CVE-2024-37117 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Automator Pro allows Reflected XSS.This issue affects Uncanny Automator Pro: from n/a through 5.3. EPSS 0.3%Vulnerability Uncanny Owl CWE-79	CVE Database V5	2024-07-22
High	7.1	EPSS 0.3%	CVE-2024-37436Uncanny Toolkit Pro for LearnDash (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-07-22CVE Database V5CVE-2024-37436 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Reflected XSS.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1. EPSS 0.3%Vulnerability Uncanny Owl CWE-79	CVE Database V5	2024-07-22
Medium	5.4	EPSS 0.2%	CVE-2024-37118Uncanny Automator Pro (WordPress plugin) · Cross Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-06-21CVE Database V5CVE-2024-37118 Cross Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Automator Pro.This issue affects Uncanny Automator Pro: from n/a through 5.3. EPSS 0.2%Vulnerability Uncanny Owl CWE-352	CVE Database V5	2024-06-21

Page 1 of 1