This vulnerability concerns the deserialization of untrusted data in the Ultimate Membership Pro plugin by azzaroco, affecting all versions up to 12.7. Deserialization vulnerabilities typically allow attackers to manipulate serialized objects, potentially leading to arbitrary code execution or other security breaches. However, specific exploitation details or impact scenarios are not provided in the available data. No official patch or fix information is currently available.

The impact could potentially allow an attacker to exploit the deserialization process to execute unauthorized actions or code within the affected application. However, without further details or known exploits, the exact impact remains unconfirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications and avoid processing untrusted serialized data where possible.