This vulnerability in WP Gravity Forms Insightly plugin arises from unsafe deserialization of untrusted data, enabling an attacker to perform object injection. The affected versions include all up to 1.1.6. Exploitation could allow remote attackers to execute arbitrary code or cause denial of service without any authentication or user interaction. The CVSS 3.1 base score of 9.8 reflects the critical nature of this flaw with network attack vector and full impact on confidentiality, integrity, and availability. No patch or official remediation details are currently provided.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized code execution, data manipulation, and service disruption. The vulnerability is remotely exploitable without authentication or user interaction, making it highly dangerous. There are no known exploits in the wild reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.