This vulnerability in ThemeREX Extreme Store involves deserialization of untrusted data, enabling object injection attacks. Affected versions include all up to 1.5.10. Exploitation could allow an attacker to execute arbitrary code or manipulate application behavior, impacting confidentiality, integrity, and availability. The vulnerability is publicly known and assigned CVE-2025-69404 with a critical CVSS score of 9.8. No official patch or fix has been disclosed yet, and no known exploits are reported in the wild.

Successful exploitation can result in complete compromise of the affected system, including unauthorized code execution and data manipulation. The vulnerability affects confidentiality, integrity, and availability at a critical level. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using affected versions of ThemeREX Extreme Store or apply any vendor-recommended temporary mitigations once published.