Barn2 Media Ltd vulnerabilities and threats

CVE-2026-40725 is a critical vulnerability in Barn2 Media Ltd's WooCommerce Product Filters plugin versions prior to 2.0.6. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data, classified under CWE-502. The vulnerability allows remote attackers to execute arbitrary code without any authentication. The CVSS 3.1 base score is 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently confirmed. Users should monitor vendor advisories for updates and consider upgrading once a fix is released.