This vulnerability in denishua WPJAM Basic involves deserialization of untrusted data, which enables an attacker to perform object injection. The affected versions include all releases up to and including version 7.0. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and minimal privileges, without user interaction, and can cause complete compromise of confidentiality, integrity, and availability of the affected system. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data and disruption of service. The vulnerability allows remote attackers with low privileges to execute arbitrary code or commands via crafted serialized data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or restricting the use of WPJAM Basic plugin if feasible, and monitor for updates from the vendor.