https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:40:18.443293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286862 EUVD-2026-286862 2026-10-06T07:40:18.446424+00:00 EUVD-2026-286862 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8350 fkie_cve-2024-8350 2026-10-06T07:40:18.446464+00:00

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group leader-level access and above, to add users to their group which ultimately allows them to leverage CVE-2024-8349 and gain admin access to the site.

 https://cve.radiocsirt.org/vuln/ghsa-3522-f7v7-pv57 GHSA-3522-f7v7-pv57 2026-10-06T07:40:18.446497+00:00

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group leader-level access and above, to add users to their group which ultimately allows them to leverage CVE-2024-8349 and gain admin access to the site.