The vulnerability CVE-2024-56283 in plainware Locatoraid Store Locator arises from unsafe deserialization of untrusted data, enabling object injection attacks. This affects all versions up to 3.9.50. The CVSS v3.1 base score is 8.1, indicating a high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to inject malicious objects during deserialization, potentially leading to remote code execution or other severe impacts compromising confidentiality, integrity, and availability of the affected system. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting the use of the vulnerable plugin and monitor for updates from the vendor. Avoid processing untrusted serialized data where possible.