CVE-2026-107127
CVE-2026-107127 · Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a password reset to an attacker-chosen value through a forged request, resulting in full account takeover.
CVSS 7.5 · High · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
uncanny toolkit for learndash
- Versions
- ≥ 0, < 3.8.2: Affected (semver)
Update to 3.8.2