Skip to content
PluginCanary

Uncanny Toolkit for LearnDash

by Uncanny Owl · 20,000+ active installs · Checked 3 Nov 2026
Watch3 Warnings

Watch: vulnerability published 30 Oct 2026, fixed in 3.8.3.

79/ 100 Canary Score
Sub-scores for Uncanny Toolkit for LearnDash
Ownership100
Maintenance100
Security50
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 3.8.3. Update to version 3.8.3 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 3.8.2. Update to version 3.8.2 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 3.8.2. Update to version 3.8.2 or later.19 Oct 2026Evidence
  • InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
uncannyowl17 Mar 2016 to 29 Oct 2026, 206 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
77
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Uncanny Toolkit for LearnDash
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 202572
Q1 20260
Q2 20261
Q3 20261
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

33% of 3 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter9.8<= 3.8.23.8.30
19 Oct 2026Uncanny Toolkit for LearnDash < 3.8.2 - Cross-Site Request Forgery8.8< 3.8.23.8.20
19 Oct 2026Uncanny Toolkit for LearnDash <= 3.8.1 - Missing Authorization2.7<= 3.8.13.8.20
22 Sep 2025Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.7.0.33.7.0.48
16 May 2025Uncanny Toolkit for LearnDash <= 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.7.0.23.7.0.3182
11 Apr 2025Uncanny Toolkit for LearnDash <= 3.7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.7.0.13.7.0.2217
2 Jun 2023Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route6.5<= 3.6.4.33.6.4.4896
1 Jun 2023Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect4.3< 3.6.4.43.6.4.4897
27 Jan 2023Uncanny Toolkit for LearnDash <= 3.6.4.1 - Cross-Site Request Forgery to Arbitrary Plugin Install and Activation8.8<= 3.6.4.13.6.4.21022
26 Nov 2022Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery8.8<= 3.6.33.6.41084

Source: Wordfence Intelligence.

Reputation

Average rating stayed at 5.0 between Q4 2024 and Q1 2025.

Rating distribution
5 star96
4 star3
3 star3
2 star0
1 star3
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Uncanny Toolkit for LearnDash
4 May 2026426
11 May 2026945
18 May 2026796
25 May 20267,129
1 Jun 20263,644
8 Jun 20261,996
15 Jun 20261,497
22 Jun 20261,236
29 Jun 20261,105
6 Jul 20262,375
13 Jul 2026916
20 Jul 2026945
27 Jul 2026786
3 Aug 2026842
10 Aug 2026698
17 Aug 2026717
24 Aug 2026914
31 Aug 2026756
7 Sep 2026637
14 Sep 2026688
21 Sep 202610,919
28 Sep 20262,276
5 Oct 20262,008
12 Oct 20267,244
19 Oct 20265,046
26 Oct 202611,757
2 Nov 20261,140

Weekly downloads over the last 4 weeks are 145% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LearnPress - Course WishlistScore 91 · 10,000+Sensei LMS CertificatesScore 91 · 4,000+LifterLMS LabsScore 91 · 2,000+LearnPress - bbPress IntegrationScore 91 · 2,000+Custom Template for LearnDashScore 91 · 1,000+

Facts

Version3.8.3
AuthorUncanny Owl
Added17 Mar 2016
Last updated29 Oct 2026
Active installs20,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP7.4
CategoryLearning Management Systems (LMS) > Course Creation & Management
Tagslms, learning, education, elearning, learndash

Other plugins by this author: Uncanny Automator - MCP Server & AI Automation for Claude & ChatGPT

Questions

Is Uncanny Toolkit for LearnDash still maintained?

Uncanny Toolkit for LearnDash was last updated on 29 Oct 2026. Its Canary status is Watch.

Is Uncanny Toolkit for LearnDash safe?

Uncanny Toolkit for LearnDash has no open unpatched vulnerabilities on record. 6 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns Uncanny Toolkit for LearnDash?

The wordpress.org author is Uncanny Owl. Recent committers: uncannyowl, plugin-master. We have recorded no ownership change.

What can I use instead of Uncanny Toolkit for LearnDash?

Plugins in the same category with a higher Canary Score: LearnPress - Course Wishlist, Sensei LMS Certificates, LifterLMS Labs, LearnPress - bbPress Integration, Custom Template for LearnDash.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue