This vulnerability involves unsafe deserialization of untrusted data in the Dotstore Woocommerce Category Banner Management plugin, allowing an attacker to perform object injection. The affected versions include all releases up to and including 2.5.1. The CVSS 3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, low privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation could lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data. The vulnerability affects the confidentiality, integrity, and availability of the system running the vulnerable plugin. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable plugin if possible, or applying any available temporary mitigations recommended by the vendor once published.