CVE-2026-12483
Received Received - Intake

Unrestricted File Upload in LearnDash LMS WordPress Plugin

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: Wordfence

Description
The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndash_fileupload_process' function, which iterates through an entire array and validates only the first file. This makes it possible for authenticated attackers, with subscriber-level access and above who are enrolled in a course with assignment uploads enabled, to upload arbitrary disallowed files, including PHP files, to the server's wp-content/uploads/learndash/assignments/ directory. The uploaded files can only be used for Remote Code Execution if default server configurations have been changed to allow for execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-12483
EUVD
EUVD-2026-71098

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
learndash learndash to 5.1.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The LearnDash LMS plugin for WordPress has a vulnerability in versions up to 5.1.5 that allows unrestricted file type uploads. The issue is in the 'learndash_fileupload_process' function, which only validates the first file in an array. This lets authenticated attackers with subscriber access or higher upload arbitrary files, including PHP files, to the server's assignments directory. Remote code execution is possible only if server configurations allow file execution.

Detection Guidance

Check for unexpected PHP or executable files in the wp-content/uploads/learndash/assignments/ directory. Use commands like 'find /path/to/wordpress/wp-content/uploads/learndash/assignments/ -type f -name "*.php"' to locate suspicious files. Review server logs for upload attempts from subscriber-level users.

Impact Analysis

Attackers could upload malicious files to your server, potentially leading to remote code execution if server settings permit it. This could allow unauthorized access to your system, data theft, or further compromise of your WordPress site and hosting environment.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data privacy) requirements. Organizations may face legal penalties, reputational damage, and loss of compliance certifications if exploited.

Mitigation Strategies

Update LearnDash to the latest version beyond 5.1.5. Disable file upload assignments if not required. Restrict file upload permissions in the wp-content/uploads/ directory. Monitor for unauthorized file uploads and remove any suspicious files immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12483. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart