The vulnerability CVE-2025-68526 affects the A WP Life Modal Popup Box plugin for WordPress, specifically versions up to and including 1.6.1. It involves deserialization of untrusted data, which allows an attacker with at least low privileges and no user interaction to perform object injection. The CVSS v3.1 base score is 8.8, indicating high impact across confidentiality, integrity, and availability. The vulnerability is network exploitable with low attack complexity and requires some privileges but no user interaction. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. This means an attacker could potentially execute arbitrary code, manipulate data, or cause denial of service conditions. The CVSS score of 8.8 reflects the high severity and broad impact of this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to restrict access to the vulnerable plugin and monitor for any suspicious activity. Avoid using the affected versions of the Modal Popup Box plugin if possible.