This vulnerability (CVE-2025-39410) is a deserialization of untrusted data issue (CWE-502) found in the themegusta Smart Sections Theme Builder - WPBakery Page Builder Addon, affecting versions through 1.7.8. Deserialization flaws occur when untrusted input is deserialized by the application, potentially allowing attackers to execute arbitrary code or cause denial of service. The CVSS 3.1 base score of 9.8 reflects its critical impact with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code, compromise data confidentiality and integrity, and cause denial of service on affected installations of the Smart Sections Theme Builder - WPBakery Page Builder Addon. Given the critical CVSS score, the impact is severe, potentially leading to full system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Users should monitor the vendor's communications for updates and consider disabling or removing the affected addon until a fix is released.