The vulnerability CVE-2024-56064 affects the azzaroco WP SuperBackup plugin for WordPress, allowing unrestricted upload of files with dangerous types. This flaw permits attackers to upload malicious files such as web shells to the server hosting the plugin, potentially leading to full system compromise. The issue impacts all versions up to 2.3.3. The CVSS 3.1 base score is 10.0, reflecting a critical severity with network attack vector, no privileges or user interaction required, and complete compromise of confidentiality, integrity, and availability. No official patch or fix has been documented in the provided data.

Successful exploitation allows an unauthenticated attacker to upload arbitrary files, including web shells, to the target server. This can lead to full system compromise, including unauthorized access, data theft, data modification, and denial of service. The vulnerability is critical due to its ease of exploitation and severe impact on system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict file upload permissions, disable the WP SuperBackup plugin if possible, and monitor for suspicious file uploads. Avoid exposing the plugin to untrusted users. Follow vendor updates closely for an official patch or mitigation.