The vulnerability CVE-2024-54367 affects the Ultimate Member ForumWP plugin up to version 2.1.0. It involves deserialization of untrusted data, which can lead to object injection attacks. This type of vulnerability can allow an attacker to execute arbitrary code or manipulate application logic by injecting malicious serialized objects. The CVSS score of 9.8 indicates a critical severity with network attack vector, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in complete compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. Given the critical CVSS score, the impact is severe and can affect the security posture of any system running the vulnerable version of ForumWP.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the vulnerable ForumWP plugin to mitigate risk. Monitor official Ultimate Member channels for updates and apply patches promptly once released.