Uncannyowl Uncanny Groups For Learndash
3 CVEs affecting Uncannyowl Uncanny Groups For Learndash. Latest disclosed: 2024-09-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8349 | High | 7.2 | 2024-09-25 | The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the p… |
CVE-2020-35650 | Medium | 6.1 | 2020-12-23 | Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaSc… |
CVE-2024-8350 | Low | 2.7 | 2024-09-25 | The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_… |