CVE-2026-119096 | Uncanny Owl Uncanny Toolkit for LearnDash Plugin up to 3.8.2 on WordPress Account Verification uo_login_action email improper authentication

October 31, 2026 Yanac

A vulnerability labeled as critical has been found in Uncanny Owl Uncanny Toolkit for LearnDash Plugin up to 3.8.2 on WordPress. Affected is the function uo_login_action of the component Account Verification. The manipulation of the argument email results in improper authentication.

This vulnerability is identified as CVE-2026-119096. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More