Live › vulnerability › CVE-2026-107127
Go to dashboardThe Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not check where a password-reset request comes from. An unauthenticated attacker can send a forged request to set the password of a user who is partway through a reset, taking over that account.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2, typically LearnDash learning sites. The sources do not describe further conditions, so any site running the plugin in that version range should treat itself as exposed. Sites without the plugin installed are not affected.
No product ranges from the sources yet.
wp plugin get uncanny-learndash-toolkit --field=version3.8.2 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a password reset to an attacker-chosen value through a forged request, resulting in full account takeover.
This page as .md · .json · in your agent: get_signal("CVE-2026-107127")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.