CVE-2026-107128

5.0 Moyenne

Publiée le 21/10/2026 à 08:16 · Modifiée le 21/10/2026 à 20:37 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own site as unverified and prevent those users from logging in.

Traduire en français

Produits concernés

Unknown Uncanny Toolkit for LearnDash

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.0 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H`

Faiblesses (CWE)

CWE-863

Références

https://wpscan.com/vulnerability/970ca143-4685-484f-96f4-7d5ba5955a2b/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories