This vulnerability (CVE-2024-24797) involves unsafe deserialization of untrusted data in the G5Theme ERE Recently Viewed – Essential Real Estate Add-On, versions up to 1.3. Deserialization flaws can allow attackers to manipulate serialized objects to execute arbitrary code or disrupt service. The CVSS 3.1 base score is 9.8, indicating network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation could lead to full compromise of the affected system, including unauthorized code execution and denial of service. The vulnerability affects confidentiality, integrity, and availability with a critical severity rating. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid exposing the vulnerable add-on to untrusted networks or inputs. Monitor vendor channels for updates and apply patches promptly once available.