Authorization Flaw in VibeThemes WPLMS Plugin
CVE-2024-56048

Currently unrated

Key Information:

Vendor

VibeThemes

Vendor
CVE Published:
18 December 2024

What is CVE-2024-56048?

The VibeThemes WPLMS Plugin is susceptible to a missing authorization vulnerability, which permits users to access functionalities not properly restricted by Access Control Lists (ACLs). This flaw can lead to unauthorized actions being executed within the plugin, potentially compromising the site's security. Affected versions extend up to 1.9.9, necessitating prompt action to mitigate risks associated with unregulated access and ensure that proper authorizations are enforced.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

.