This vulnerability in AncoraThemes SevenHills (up to version 1.6.2) is caused by unsafe deserialization of untrusted data, enabling an attacker to perform object injection. Exploitation could allow remote attackers to execute arbitrary code or cause denial of service without any authentication or user interaction. The CVSS 3.1 base score is 9.8 (critical), reflecting high impact on confidentiality, integrity, and availability. No official patch or vendor advisory is provided in the available data, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could result in full system compromise, including remote code execution and denial of service. Confidentiality, integrity, and availability of the affected system are all at high risk due to the nature of object injection via deserialization of untrusted data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the vulnerable SevenHills theme or applying any temporary mitigations recommended by the vendor. Monitor official AncoraThemes channels for updates.