This vulnerability involves deserialization of untrusted data in BoldThemes Ippsum (versions up to 1.2.0), which allows an attacker to perform object injection. The vulnerability is remotely exploitable without privileges or user interaction, resulting in high impact on confidentiality, integrity, and availability as reflected by a CVSS 3.1 base score of 9.8. No patch or vendor advisory details are currently available, and no known exploits have been reported.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. The vulnerability is critical due to its remote exploitability without authentication and the potential for complete system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the vulnerable component and monitoring for suspicious activity related to deserialization processes. Avoid processing untrusted serialized data where possible.