The vulnerability CVE-2024-52414 affects the WDES Responsive Mobile Menu plugin by Anthony Carbon, allowing an attacker to perform object injection through deserialization of untrusted data. This can lead to remote code execution or other severe impacts due to the critical nature of the flaw. The issue affects all versions up to 5.3.18. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability. No patch or mitigation details are currently available from the vendor or advisory sources.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code, compromise system confidentiality, integrity, and availability. This could lead to full system takeover or disruption of services using the affected plugin. Given the critical CVSS score, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.