The vulnerability CVE-2025-47549 affects the Themefic BEAF plugin for WordPress, specifically versions up to 4.6.10. It allows an authenticated user with high privileges to upload files without proper restrictions on file types, enabling the upload of malicious web shells. This can result in full system compromise, including unauthorized code execution and data breaches. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to an attacker uploading and executing arbitrary code on the web server, resulting in full compromise of the affected system's confidentiality, integrity, and availability. This can include unauthorized access to sensitive data, defacement, or disruption of services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin to trusted administrators only and consider disabling or removing the plugin if possible to prevent exploitation.