Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Uncanny Toolkit for LearnDash lets users gain higher rights

CVE-2026-65555 · published 9 days ago
Summary

The Uncanny Toolkit for LearnDash plugin can let a regular user obtain administrator-like privileges. This means an attacker could change settings or access data they shouldn't. Update the plugin to the latest version or remove it if you don't need it.

What to do
  • Update uncanny owl uncanny toolkit for learndash to version 3.8.3.
Affected software
VendorProductAffected versions
uncanny owl uncanny toolkit for learndash <= 3.8.2
Fix: upgrade to 3.8.3
Original advisory text
WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-266Incorrect Privilege Assignment
Timeline
Published4 Nov 2026
Updated12 Nov 2026
First seen4 Nov 2026
Sources
CVE-2026-65555 · NVD
CVE-2026-65555 · MITRE
Track software like this
Free during beta