Skip to main content

Wordpress Learning Management System CVE-2024-56049

HIGH
Path Traversal: '.../...//' (CWE-35)
2024-12-18 audit@patchstack.com
WordPress Path Traversal Wordpress Learning Management System Wordpress Plugin Vibethemes
8.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.5 HIGH
AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
High

Lifecycle Timeline

3
CVSS changed
Apr 23, 2026 - 15:42 NVD
8.5 (HIGH)
CVE Published
Dec 18, 2024 - 19:15 nvd
N/A
CVE Published
Dec 18, 2024 - 19:15 cve.org
HIGH 8.5

DescriptionCVE.org

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2.

AnalysisAI

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.9.9.5.2. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-35. Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.9.9.5.2. Affected products include: Vibethemes Wordpress Learning Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Wordpress Learning Management System

View all
CVE-2024-56046 CRITICAL
10.0 Dec 31

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell
CVE-2024-56057 CRITICAL
9.9 Dec 18

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell
CVE-2024-56052 CRITICAL
9.9 Dec 18

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell
CVE-2024-56050 CRITICAL
9.9 Dec 18

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell
CVE-2024-56044 CRITICAL
9.8 Dec 31

Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentic
CVE-2024-56043 CRITICAL
9.8 Dec 31

Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.9.9. Rated cri
CVE-2024-10470 CRITICAL
9.8 Nov 09

The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file re
CVE-2024-56042 CRITICAL
9.3 Dec 31

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS w
CVE-2024-56045 CRITICAL
9.3 Dec 31

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.9.9.5. Rated critical s
CVE-2024-56054 CRITICAL
9.1 Dec 18

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell
CVE-2024-56048 HIGH
8.8 Dec 18

Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constra
CVE-2023-36690 HIGH
8.8 Jul 11

Cross-Site Request Forgery (CSRF) vulnerability in VibeThemes WPLMS theme <= 4.900 versions. Rated high severity (CVSS 8

Same weakness CWE-35 – Path Traversal: '.../...//'

View all
CVE-2025-8088 HIGH POC
8.4
CVE-2024-2863 CRITICAL POC
9.8
CVE-2018-3744 CRITICAL POC
9.8
CVE-2024-36991 HIGH POC
7.5
CVE-2026-6074 CRITICAL
9.3
CVE-2026-59115 CRITICAL
9.9
CVE-2026-69109 HIGH
8.7
CVE-2024-45190 MEDIUM POC
6.5

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2022-41352 CRITICAL POC
9.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8

Share

CVE-2024-56049 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy