This vulnerability in Dotstore Woocommerce Category Banner Management plugin allows an attacker to perform deserialization of untrusted data, resulting in object injection. The affected versions include all up to and including 2.5.1. The CVSS 3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, requiring privileges but no user interaction, and resulting in high confidentiality, integrity, and availability impacts. No patch or vendor advisory information is currently available.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. An attacker with low privileges and network access can exploit this vulnerability without user interaction. This could allow execution of arbitrary code or other malicious actions via object injection through deserialization of untrusted data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict network access to the affected plugin and limit privileges of users who can interact with it. Monitor for updates from Dotstore regarding an official fix.