The vulnerability identified as CVE-2025-68526 affects the A WP Life Modal Popup Box plugin for WordPress, specifically versions up to and including 1.6.1. It involves deserialization of untrusted data, which allows an attacker to perform object injection. This can lead to remote code execution or other severe impacts on the system. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. Given the high CVSS score and the nature of object injection via deserialization, attackers could execute arbitrary code or commands on the server hosting the vulnerable plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider disabling or removing the vulnerable plugin to mitigate risk.