This vulnerability in sbthemes WooCommerce Infinite Scroll plugin versions up to 1.6.2 involves deserialization of untrusted data, which enables an attacker to perform object injection. Such a flaw can allow remote attackers with low privileges to execute arbitrary code or cause denial of service by manipulating serialized data inputs. The CVSS 3.1 base score of 8.8 reflects the network attack vector, low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. Attackers may execute arbitrary code or disrupt service. The vulnerability requires low privileges but no user interaction, making it a significant risk if an attacker can send crafted data to the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the affected plugin version to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.