The vulnerability CVE-2025-69035 in the Dental Care CPT plugin by strongholdthemes is caused by deserialization of untrusted data, enabling object injection attacks. This issue affects all versions up to and including 20.2. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, requiring low privileges but no user interaction, and impacts confidentiality, integrity, and availability. There is no indication of known exploits in the wild or vendor-provided patches.

Successful exploitation of this vulnerability could allow an attacker with low privileges to execute arbitrary code or inject malicious objects remotely without user interaction, leading to full compromise of the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and monitor for suspicious activity related to deserialization processes. Avoid using affected versions of the Dental Care CPT plugin if possible.