The vulnerability CVE-2025-69329 affects Jthemes Prestige versions before 1.4.1 and involves deserialization of untrusted data, enabling object injection attacks. This can allow an attacker to execute arbitrary code or manipulate application logic remotely without authentication. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code, alter data, or cause denial of service on affected systems running vulnerable versions of Jthemes Prestige. The impact affects confidentiality, integrity, and availability at a critical level. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the affected application and monitoring for unusual activity related to deserialization processes. Avoid processing untrusted serialized data if possible.