A vulnerability was found in Academy LMS Plugin up to 3.5.0 on WordPress and classified as critical. Impacted is an unknown function. The manipulation results in Remote Code Execution.
This vulnerability is known as CVE-2025-15521. It is possible to launch the attack remotely. No exploit is available.
