CVE-2026-107127
Deferred Deferred - Pending Action

Unvalidated Password Reset in Uncanny Toolkit for LearnDash

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: WPScan

Description
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password of a user who is partway through a password reset to an attacker-chosen value through a forged request, resulting in full account takeover.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-10-21
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-09
NVD
CVE-2026-107127
EUVD
EUVD-2026-107058

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Uncanny Toolkit for LearnDash 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Uncanny Toolkit for LearnDash WordPress plugin before version 3.8.2. It allows an unauthenticated attacker to take over a user's account by exploiting a flaw in the password reset process. The plugin does not properly validate where password reset requests come from, so an attacker can send a forged request to a user who is resetting their password. This lets the attacker set a new password for the user's account, giving them full control.

Detection Guidance

Check if the Uncanny Toolkit for LearnDash plugin is installed and verify its version. If it is below 3.8.2, the system is vulnerable. Look for unusual password reset activities or unauthorized account changes.

Impact Analysis

If you use the Uncanny Toolkit for LearnDash plugin before version 3.8.2, an attacker could hijack your WordPress account. This means they could access your sensitive data, change your settings, or perform actions on your behalf. Even if you are in the middle of resetting your password, an attacker could intercept and manipulate the process to take over your account.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating compliance requirements under GDPR and HIPAA. GDPR requires protecting personal data, and HIPAA mandates safeguarding protected health information. Account takeover could result in data breaches, leading to legal penalties, fines, or reputational damage for organizations.

Mitigation Strategies

Update the Uncanny Toolkit for LearnDash plugin to version 3.8.2 or later immediately. If updating is not possible, consider disabling the plugin until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107127. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...