high8.0

CVE-2026-39598

Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server.

Impact

Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2.

Affected products

Product	Affected versions
Academy LMS Pro: From N/A	before 3.5.2.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-434

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/academy-pro/vulnerability/wordpress-academy-lms-pro-plugin-3-5-2-arbitrary-file-upload-vulnerability?_s_id=cve