The vulnerability CVE-2024-52407 in BasePress Migration Tools allows an attacker with low privileges to upload files without proper restrictions on file types. This unrestricted file upload can be exploited to upload a web shell, resulting in full system compromise. The affected versions include all versions up to and including 1.0.0. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to upload a web shell to the web server, potentially leading to full system compromise including unauthorized access, data theft, modification, and service disruption. The vulnerability affects confidentiality, integrity, and availability at a critical level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the BasePress Migration Tools plugin to trusted users only and consider disabling or removing the plugin if not essential. Monitor for suspicious file uploads and activity related to this component.