The vulnerability CVE-2025-58815 affects the Aitasi Coming Soon plugin by Rubel Miah, specifically versions up to 2.0.2. It is caused by unsafe deserialization of untrusted data, which allows an attacker with high privileges to inject malicious objects. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could result in full compromise of the affected system's confidentiality, integrity, and availability. Given the high CVSS score and the nature of object injection via deserialization, attackers could execute arbitrary code or manipulate application behavior. However, exploitation requires high privileges, which limits the attack surface somewhat. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and limit privileges to trusted users only. Monitor for updates from the vendor or security advisories that may provide patches or mitigation instructions.