Veille CVE

Recherche « Unknown Uncanny Toolkit for LearnDash »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Uncanny Toolkit for LearnDash » ✕
  1. CVE-2026-107128 5.0 Moyenne

    Unknown Uncanny Toolkit for LearnDash

    The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own site as unverified and prevent those users from logging in.

  2. CVE-2026-107127 7.5 Élevée

    Unknown Uncanny Toolkit for LearnDash

    The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a password reset to an attacker-chosen value through a forged request, resulting in full account takeover.