Uncanny Toolkit for LearnDash WordPress plugin privilege escalation
A WordPress learning-site plugin lets anyone gain admin rights!
Summary
Incorrect privilege assignment in the Uncanny Toolkit for LearnDash WordPress plugin allows privilege escalation. Versions through 3.8.2 are affected.
What to do
Update the plugin to 3.8.3 or later, and check the vendor's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen