This vulnerability (CVE-2025-47584) affects ThemeGoods Photography up to version 7.5.2 and is classified as CWE-502: Deserialization of Untrusted Data. It allows an attacker to send crafted serialized data that, when deserialized by the application, can lead to full system compromise including confidentiality, integrity, and availability impacts. The CVSS 3.1 base score is 8.5, reflecting network attack vector, high attack complexity, low privileges required, no user interaction, and complete impact on all security properties. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or commands, leading to full compromise of the affected system's confidentiality, integrity, and availability. Given the high CVSS score and the nature of deserialization flaws, the impact is severe, potentially allowing remote code execution or other critical impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected application and monitor for unusual activity related to deserialization processes. Avoid processing untrusted serialized data where possible.