CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.
Explanation of Vulnerability in Simple Terms
Uncanny Toolkit for LearnDash versions up to 3.6.4.3 lack proper authorization checks, allowing unauthenticated attackers to modify site data and disrupt service. The vulnerability requires no special access or user interaction. Site administrators should update to a version newer than 3.6.4.3 immediately.
What an attacker can do
Modify site data and cause service disruption without authentication.
Potential impact on your site
Unauthorized users can alter course content, user records, or availability without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
