CVE-2024-8030

CVE-2024-8030 is a critical PHP Object Injection vulnerability affecting the Ultimate Store Kit Elementor Addons plugin (versions up to and including 2.0.3). An unauthenticated attacker can exploit this by deserializing untrusted input via the _ultimate_store_kit_wishlist cookie. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability if a suitable POP chain is present on the system. While no active exploits, public exploit code, or significant community discussion have been observed, its high EPSS and FAUCET Risk Score indicate a significant threat.