Critical · 9.9 CVE-2024-49331 EUVD-2024-43394GHSA-3mp6-cvg4-cj7v

WordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability

Published Oct 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Myriad Solutionz Product: Property Lot Management System

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System plms allows Upload a Web Shell to a Web Server.This issue affects Property Lot Management System: from n/a through <= 4.2.38.

Affected products

Vendor	Product	Affected	Fixed
Myriad Solutionz	Property Lot Management System	≤ 4.2.38	—

References

https://patchstack.com/database/Wordpress/Plugin/plms/vulnerability/wordpress-property-lot-management-system-plugin-4-2-38-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry