The AncoraThemes Beelove plugin versions up to 1.2.6 suffer from a deserialization of untrusted data vulnerability that enables object injection attacks. This vulnerability can be exploited remotely without authentication or user interaction, leading to complete compromise of the affected system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting the critical nature of this flaw. No patch or official remediation guidance is currently available from the vendor or other authoritative sources.

Successful exploitation of this vulnerability can result in full system compromise, including unauthorized disclosure of information, modification of data, and disruption of service. The vulnerability requires no privileges and no user interaction, making it highly exploitable in remote attack scenarios. There are no known exploits in the wild at present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected plugin version to mitigate risk. Monitor vendor channels for updates and apply patches promptly once released.