The vulnerability CVE-2025-60235 affects the Support Ticket System for WooCommerce (Premium) plugin by Plugify, allowing unrestricted upload of files with dangerous types. This can be exploited by attackers to upload malicious files, potentially leading to full compromise of the affected system. The issue affects all versions up to and including 2.0.7. The CVSS 3.1 base score is 10.0, reflecting critical impact and ease of exploitation without any privileges or user interaction. No patch or official remediation details are currently available.

Successful exploitation of this vulnerability can lead to complete compromise of the affected system, including full loss of confidentiality, integrity, and availability. Attackers can upload malicious files that may execute arbitrary code or disrupt system operations. Given the critical CVSS score and the nature of the vulnerability, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload capabilities where possible and monitor for suspicious activity related to file uploads. Avoid using affected versions of the plugin in production environments if feasible.