This vulnerability in Elated-Themes Konsept (<=1.9) is an unauthenticated PHP object injection issue, classified as CWE-502. It allows remote attackers to exploit deserialization of untrusted data, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 8.1, indicating a high severity with network attack vector, high attack complexity, no privileges required, and no user interaction needed. No official patch or remediation level is currently documented, and no known exploits in the wild have been reported.

Successful exploitation could result in complete compromise of the affected system's confidentiality, integrity, and availability. Since the vulnerability is exploitable without authentication and requires no user interaction, it poses a significant risk to affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to vulnerable endpoints and monitoring for suspicious activity related to PHP object injection attempts. Avoid exposing the affected application to untrusted networks where possible.