This vulnerability is a PHP Object Injection flaw in the Responsive Slider Gallery plugin by A WP Life, present in versions up to 1.5.5. It arises from deserialization of untrusted data, which can lead to remote code execution or other severe impacts. The CVSS v3.1 base score is 7.2, indicating high severity, with network attack vector, low attack complexity, and no user interaction required. The attacker must have high privileges to exploit this issue.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The attacker requires high privileges, which limits the attack surface but does not eliminate the risk of severe impact.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for suspicious activity related to the plugin.