The vulnerability CVE-2025-32284 affects designthemes Pet World versions up to and including 2.8. It is a deserialization of untrusted data issue that permits object injection attacks. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. No vendor advisory or patch information is available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to full compromise of the affected Pet World application, including unauthorized data access, modification, and denial of service. The attacker can inject malicious objects via deserialization, potentially executing arbitrary code or disrupting service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting deserialization functionality if possible or applying application-level input validation to mitigate risk.