The vulnerability CVE-2024-56057 affects VibeThemes WPLMS plugin versions before 1.9.9.5.2. It allows an attacker with low privileges to upload files of dangerous types without restriction, including web shells, to the web server. This can lead to full compromise of the affected system. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability. No patch or official vendor advisory is currently available to confirm remediation status.

Successful exploitation allows an attacker to upload and execute arbitrary code on the web server, leading to full system compromise including confidentiality breach, data integrity loss, and denial of service. The vulnerability is critical due to the ease of exploitation and the severity of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions, implement strict file type validation, and monitor for suspicious uploads as temporary mitigations.