This vulnerability in Axiomthemes 69 Clothing (<=1.2.11.1) allows unauthenticated attackers to perform PHP object injection via deserialization of untrusted data (CWE-502). The flaw enables remote code execution or other malicious actions without requiring authentication. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.

Successful exploitation can lead to full compromise of the affected system, including unauthorized code execution, data disclosure, and service disruption. The vulnerability affects all users of 69 Clothing versions up to 1.2.11.1 and poses a critical risk to system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity. Avoid processing untrusted serialized data where possible.