The vulnerability CVE-2025-69403 affects Bravis-Themes Bravis Addons up to version 1.3.0 and involves unrestricted upload of files with dangerous types. This allows an attacker with low privileges to upload malicious files directly, which can lead to full system compromise. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction required, and complete impact on confidentiality, integrity, and availability. No patch or vendor advisory details are provided, and the product is not a cloud service.

Successful exploitation can result in complete compromise of the affected system, including full loss of confidentiality, integrity, and availability. Attackers can upload malicious files that may lead to remote code execution or other severe impacts. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions and monitor for suspicious activity related to file uploads. Avoid exposing the vulnerable component to untrusted users where possible.