A critical PHP object injection vulnerability in the eyecix JobSearch plugin allows unauthenticated attackers to achieve remote code execution.

This flaw is caused by the deserialization of untrusted data, specifically categorized as CWE-502. An unauthenticated attacker can exploit this via the plugin to execute arbitrary PHP code on the underlying server.

The severity of this vulnerability is critical, reflected by a CVSS score of 9.8. Successful exploitation grants an attacker full control over the affected web server, leading to potential data exfiltration, system compromise, and significant operational downtime.

Immediate Action: Identify all instances of the JobSearch plugin and restrict access until a patched version is released and applied. If a newer version is available from the vendor, update immediately.

Proactive Monitoring: Review web server access logs for suspicious serialized PHP objects or anomalous POST requests directed at plugin-specific endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block deserialization attempts or malicious payloads targeting PHP applications.

Public Exploit Available: Unknown

Given the critical nature of this vulnerability and the lack of authentication required for exploitation, organizations should treat this as a high-priority security risk. Administrators must monitor the vendor for the release of a security patch and apply it immediately to prevent potential system compromise.