The vulnerability CVE-2025-60234 affects designthemes Single Property versions up to 2.8 and is caused by unsafe deserialization of untrusted data, enabling object injection attacks. This can allow an attacker with low privileges to remotely execute arbitrary code or manipulate application behavior, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting high impact and ease of exploitation over the network without user interaction. No vendor advisory or patch information is provided, and the product is not a cloud service, so remediation responsibility lies with the user.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized data access, modification, and denial of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected application and monitor for suspicious activity related to deserialization. Avoid processing untrusted serialized data where possible.