CVE-2026-65555: WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Uncanny Owl Uncanny Toolkit for LearnDashto a version that resolves this vulnerability.Fixed in 3.8.3
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is rated AV:N/AC:L/PR:N/UI:N, indicating it can be exploited remotely with low complexity, without prior privileges or user interaction.
What is the potential impact of successful exploitation?
Successful exploitation can result in privilege escalation with high impacts to confidentiality, integrity, and availability.
Which plugin versions are affected?
Uncanny Toolkit for LearnDash versions through 3.8.2 are affected. The available data does not identify a fixed version.