Skip to content
Noroxi

uncannyowl records

16 published records for vendor uncannyowl.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
43.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2024-37119
    39Monitor

    WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    uncannyowl · uncanny automatorNov 1, 2024

  • CVE-2025-48133
    39Monitor

    WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    uncannyowl · uncanny automatorJun 5, 2025

  • CVE-2025-2075
    36Monitor

    Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

    HighCVSS 8.8Proof of conceptEPSS 2%

    uncannyowl · uncanny automatorApr 4, 2025

  • CVE-2025-3623
    36Monitor

    Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function

    CriticalCVSS 9.1No exploitEPSS 0%

    uncannyowl · uncanny automatorMay 13, 2025

  • CVE-2023-23714
    35Monitor

    WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    uncannyowl · uncanny toolkit for learndashMay 26, 2023

  • CVE-2024-37118
    35Monitor

    WordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    uncannyowl · uncanny automatorJun 21, 2024

  • CVE-2024-8349
    28Monitor

    Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

    HighCVSS 7.2Proof of conceptEPSS 1%

    uncannyowl · uncanny groups for learndashSep 24, 2024

  • CVE-2023-34020
    24Monitor

    WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    uncannyowl · uncanny toolkit for learndashMar 27, 2024

  • CVE-2020-35650
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inje

    MediumCVSS 6.1No exploitEPSS 0%

    uncannyowl · uncanny groups for learndashDec 23, 2020

  • CVE-2020-9439
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote at

    MediumCVSS 6.1No exploitEPSS 0%

    uncannyowl · tin canny reporting for learndashDec 23, 2020

  • CVE-2024-37117
    24Monitor

    WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    uncannyowl · uncanny automatorJul 22, 2024

  • CVE-2023-52151
    21Monitor

    WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure

    MediumCVSS 5.3No exploitEPSS 0%

    uncannyowl · uncanny automatorJan 5, 2024

  • CVE-2024-37439
    21Monitor

    WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    uncanny owl · uncanny toolkit pro for learndashNov 1, 2024

  • CVE-2025-4520
    17Monitor

    Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

    MediumCVSS 4.3No exploitEPSS 0%

    uncannyowl · uncanny automatorMay 13, 2025

  • CVE-2024-13838
    15Monitor

    Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook

    LowCVSS 3.8No exploitEPSS 0%

    uncannyowl · uncanny automatorMar 12, 2025

  • CVE-2024-8350
    10Monitor

    Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add

    LowCVSS 2.7No exploitEPSS 0%

    uncannyowl · uncanny groups for learndashSep 24, 2024