This vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot (up to version 12.7.0) involves unsafe deserialization of untrusted data, which can lead to object injection attacks. Such attacks may allow an unauthenticated remote attacker to execute arbitrary code or cause denial of service. The CVSS 3.1 base score of 9.8 reflects the critical impact on confidentiality, integrity, and availability with low attack complexity and no required privileges or user interaction. No patch or remediation details have been provided by the vendor or in the advisory.

Successful exploitation could allow remote attackers to execute arbitrary code, manipulate data, or disrupt service on affected installations of WPBot Pro Wordpress Chatbot. The vulnerability affects confidentiality, integrity, and availability, making it critical for impacted environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the WPBot Pro Wordpress Chatbot plugin if feasible, or restrict access to the affected functionality. Monitor vendor channels for updates and apply patches promptly once released.