The vulnerability CVE-2025-69036 affects the Tech Life CPT plugin by strongholdthemes and is caused by deserialization of untrusted data, enabling object injection attacks. This can allow an attacker with low privileges and no user interaction to execute arbitrary code or cause denial of service, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8, reflecting high severity with network attack vector, low attack complexity, and no user interaction required. The affected versions include all versions up to 16.4. No patch or official remediation has been documented in the provided data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code, manipulate data, or disrupt service on systems running vulnerable versions of Tech Life CPT. The impact includes full compromise of confidentiality, integrity, and availability as indicated by the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.