The vulnerability CVE-2025-32568 affects EmpikPlace for Woocommerce plugin versions up to 1.4.3. It involves deserialization of untrusted data, which can lead to object injection attacks. This type of vulnerability allows an attacker to craft malicious serialized objects that, when deserialized by the application, can execute arbitrary code or cause other harmful effects. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. Given the critical CVSS score, the impact is severe and can affect the confidentiality, integrity, and availability of the system running the vulnerable plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the EmpikPlace for Woocommerce plugin if feasible. Monitor vendor communications for updates on patches or mitigations.