The vulnerability CVE-2025-53584 affects the WP Ticket Customer Service Software & Support Ticket System by emarket-design, specifically versions up to and including 6.0.2. It is caused by insecure deserialization of untrusted data, enabling an attacker to perform object injection. This can result in remote code execution or other severe impacts. The CVSS v3.1 base score is 8.1, reflecting network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to inject malicious objects via deserialization, potentially leading to full system compromise including unauthorized data access, modification, or denial of service. The high CVSS score indicates critical impact on confidentiality, integrity, and availability of the affected software.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or restricting access to the affected software, applying network-level protections to limit exposure, and monitoring for unusual activity related to deserialization processes. Avoid processing untrusted data where possible.