This vulnerability in ThemeREX Equestrian Centre arises from unsafe deserialization of untrusted data, enabling an attacker to perform object injection. The flaw affects versions up to 1.5 and can be exploited remotely without authentication or user interaction. The CVSS 3.1 base score of 9.8 reflects the critical impact on confidentiality, integrity, and availability. No official patch or vendor advisory details are available to confirm remediation status.

Successful exploitation can lead to full compromise of the affected system, including unauthorized code execution, data manipulation, and denial of service. Given the critical CVSS score and the nature of object injection via deserialization, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted serialized data and consider applying application-level controls to restrict or validate input data. Monitor vendor channels for updates.