The vulnerability CVE-2025-31396 in the themeton FLAP - Business WordPress Theme involves deserialization of untrusted data (CWE-502), which can lead to object injection attacks. This issue affects all versions up to 1.5 of the theme. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or remediation details have been provided by the vendor or in the advisory.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or manipulate application behavior by injecting malicious objects during deserialization. This can compromise the confidentiality, integrity, and availability of the affected WordPress site running the FLAP theme. Given the critical CVSS score, the impact is severe if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the affected theme if possible, or applying any temporary mitigations recommended by the vendor. Monitor official themeton channels for updates regarding patches or workarounds.