中
5.0
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting...
CVE-2026-107128
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 修正版 |
|---|---|---|---|
| CVE | Uncanny Toolkit for LearnDash |
3.8.2 未満 |
3.8.2 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own site as unverified and prevent those users from logging in.
出典: GitHub Security Advisories (Global) NVD GitHub Advisory
参照URL
- web nvd.nist.gov
- web wpscan.com
- web github.com
- web contact@wpscan.com