The vulnerability CVE-2025-69328 affects the magepeopleteam Booking and Rental Manager plugin for WooCommerce, specifically versions up to 2.5.9. It is caused by deserialization of untrusted data, which allows an attacker to perform object injection. This can result in remote code execution or other severe impacts. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, and impacting confidentiality, integrity, and availability at a high level. No patch or official remediation details are currently available from the vendor or other sources.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected plugin to mitigate risk. Monitor vendor communications for updates on patches or mitigations.