This vulnerability involves unsafe deserialization of untrusted data in the RealMag777 TableOn plugin, specifically in the posts-table-filterable component. Exploiting this flaw allows an attacker to perform object injection, potentially leading to full compromise of the affected system. The vulnerability affects all versions up to and including 1.0.4.3. The CVSS v3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability.

Successful exploitation can lead to complete system compromise, including unauthorized disclosure of information, modification of data, and disruption of service. The vulnerability is remotely exploitable without authentication or user interaction, increasing the risk of widespread impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected TableOn plugin version to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.