The vulnerability identified as CVE-2024-56049 affects the VibeThemes WPLMS plugin, specifically versions prior to 1.9.9.5.2. It involves a path traversal issue using the '.../...//' pattern, which can be exploited by an attacker with low privileges and no user interaction required. The CVSS 3.1 score is 8.5, indicating a high severity with network attack vector, low attack complexity, and a scope change. The impact includes no confidentiality loss, limited integrity loss, and high availability loss. There is no vendor advisory or patch link provided, and the product is not a cloud service.

An attacker with low privileges can exploit this path traversal vulnerability remotely without user interaction. The impact includes limited integrity compromise and significant disruption to availability. Confidentiality is not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is provided in the available data, users should monitor VibeThemes communications for updates. Restricting access to the plugin and applying principle of least privilege may reduce risk until a fix is available.