Privilege Escalation in Uncanny Toolkit for LearnDash

WordPress

What happened

A vulnerability has been discovered that allows for privilege escalation in the Uncanny Toolkit for LearnDash.

Are you affected?

Users of the Uncanny Toolkit for LearnDash who are running versions 3.8.2 or earlier may be affected.

What to do now

1. Upgrade to version 3.8.3 or later.
2. Review user permissions to ensure they are appropriately restricted.
3. Monitor for any suspicious activity related to user privileges.

Sources

• cve.now/CVE-2026-65555
• CVE-2026-65555
• https://patchstack.com/database/wordpress/plugin/uncanny-learndash-toolkit/vulnerability/wordpress-uncanny-toolkit-for-learndash-plugin-3-8-2-privilege-escalation-vulnerability?_s_id=cve
• cve.now/GHSA-r752-mf93-75c8
• GHSA-r752-mf93-75c8
• https://nvd.nist.gov/vuln/detail/CVE-2026-65555

Data sources: cve.now, CISA KEV, GitHub Advisory Database, OSV.

This product uses data from the NVD API but is not endorsed or certified by the NVD.