The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a password reset to an attacker-chosen value through a forged request, resulting in full account takeover.
| Vendor | Product | Versions |
|---|---|---|
| WordPress | Uncanny Toolkit for LearnDash Plugin | 0 |
Loading…
Added vendor and product information, confirmed affected version 3.8.1, classified as MEDIUM severity CSRF vulnerability (CWE-352), patched in 3.8.2, and added MITRE ATT&CK technique T1548.
Initial creation
