This vulnerability in the OCDI One Click Demo Import plugin allows an attacker with high privileges to exploit unsafe deserialization of untrusted data. The CVSS 3.1 score is 4.4 (medium), reflecting limited confidentiality and integrity impact without availability impact. The attack complexity is high, and no user interaction is required. The affected versions include all versions up to 3.2.0. No vendor advisory or patch information is currently available.

Successful exploitation could lead to partial compromise of confidentiality and integrity within the affected system. The vulnerability does not impact availability. Exploitation requires high privileges, limiting the scope of potential attackers. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to high-privilege accounts and monitor for suspicious activity related to the plugin. Avoid importing untrusted demo data to reduce risk.