The vulnerability identified as CVE-2024-29135 affects the Themefic Tourfic WordPress plugin up to version 2.11.15. It involves an unrestricted file upload flaw where the plugin does not properly restrict or validate the types of files that can be uploaded. This could allow an attacker to upload files that may be executed or used maliciously on the affected system. The vulnerability is publicly disclosed but lacks detailed technical or exploit information and does not have a CVSS score assigned.

The impact of this vulnerability is that an attacker could upload files with dangerous types, potentially leading to unauthorized code execution or other malicious activities depending on the server configuration and file handling. However, no known exploits have been reported, and the exact impact depends on the environment where the plugin is deployed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Themefic's official channels for updates. In the meantime, restricting file upload permissions and disabling file uploads if not necessary may reduce risk.