Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Uncanny Owl — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting Uncanny Owl. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2025-66056 WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability — Uncanny AutomatorCWE-497 7.5 -2025-11-21
CVE-2025-57988 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability — Uncanny Toolkit for LearnDashCWE-79 6.5 Medium2025-09-22
CVE-2025-58193 WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability — Uncanny AutomatorCWE-862 4.3 Medium2025-08-27
CVE-2025-48133 WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability — Uncanny AutomatorCWE-862 6.5 Medium2025-06-05
CVE-2025-48080 WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability — Uncanny Toolkit for LearnDashCWE-79 6.5 Medium2025-05-16
CVE-2025-22268 WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.1 - Cross Site Scripting (XSS) vulnerability — Uncanny Toolkit for LearnDashCWE-79 6.5 Medium2025-04-15
CVE-2024-37438 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability — Uncanny Toolkit Pro for LearnDashCWE-352 5.4 Medium2025-01-02
CVE-2023-34019 WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability — Uncanny Toolkit for LearnDashCWE-862 6.5 Medium2024-12-13
CVE-2024-37119 WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability — Uncanny Automator ProCWE-862 5.3 Medium2024-11-01
CVE-2024-37439 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability — Uncanny Toolkit Pro for LearnDashCWE-862 5.4 Medium2024-11-01
CVE-2024-8350 Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add — Uncanny Groups for LearnDashCWE-862 2.7 Low2024-09-25
CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation — Uncanny Groups for LearnDashCWE-862 7.2 High2024-09-25
CVE-2024-39656 WordPress Tin Canny Reporting for LearnDash plugin <= 4.3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability — Tin Canny Reporting for LearnDashCWE-79 7.1 High2024-08-01
CVE-2024-37117 WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability — Uncanny Automator ProCWE-79 7.1 High2024-07-22
CVE-2024-37436 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability — Uncanny Toolkit Pro for LearnDashCWE-79 7.1 High2024-07-22
CVE-2024-37118 WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability — Uncanny Automator Pro 5.4 Medium2024-06-21
CVE-2023-34020 WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability — Uncanny Toolkit for LearnDashCWE-601 4.7 Medium2024-03-27
CVE-2023-23714 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF) — Uncanny Toolkit for LearnDashCWE-352 4.3 Medium2023-05-26

This page lists every published CVE security advisory associated with Uncanny Owl. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.