The vulnerability CVE-2024-56051 in VibeThemes WPLMS plugin involves improper control over code generation, enabling an attacker to inject arbitrary code. This affects all versions before 1.9.9.5. The CVSS 3.1 base score is 8.5, indicating a high impact with network attack vector, high privileges required, no user interaction needed, and scope changed. The impact includes full compromise of confidentiality, integrity, and availability of the affected system. No patch or official vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected system, potentially leading to full system compromise including data theft, modification, or service disruption. The vulnerability affects confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the vulnerable plugin and monitoring for suspicious activity related to code injection attempts. Avoid deploying or exposing vulnerable versions in production environments.