A critical unauthenticated PHP Object Injection vulnerability in the axiomthemes Agricola theme allows for potential remote code execution, demanding immediate attention from security teams.

The theme fails to properly validate user-supplied input before deserializing it, which is classified as CWE-502. This allows an unauthenticated attacker to pass malicious serialized objects, which can then be used to execute arbitrary code on the server.

With a CVSS score of 9.8, this vulnerability represents a critical risk to business continuity and data security. An attacker could exploit this flaw to bypass all authentication mechanisms, steal database credentials, or deploy persistent backdoors within the application environment.

Immediate Action: Update the Agricola theme to the most recent version provided by axiomthemes to remediate the deserialization flaw.

Proactive Monitoring: Audit application logs for suspicious activity, including requests that attempt to pass serialized data to themes or plugins.

Compensating Controls: Deploy a Web Application Firewall (WAF) to filter incoming traffic and block payloads containing serialized PHP objects.

Public Exploit Available: No

The presence of a known proof-of-concept, combined with the critical CVSS severity, necessitates an urgent response. Security teams should ensure that the Agricola theme is updated to a patched version immediately to prevent unauthorized access and potential remote code execution.