The vulnerability CVE-2025-32656 affects RadiusTheme's Testimonial Slider And Showcase Pro plugin (<= 2.3.15). It is caused by improper validation or control of filenames used in PHP include or require statements, enabling PHP Local File Inclusion. This can allow an attacker to execute arbitrary local files on the server, leading to high impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.1, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently provided, and no known exploits have been reported.

Successful exploitation of this vulnerability allows an attacker to include and execute arbitrary local files on the affected server. This can lead to full compromise of the system's confidentiality, integrity, and availability. The CVSS score of 8.1 indicates a high impact vulnerability exploitable remotely without authentication or user interaction but requiring high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin version to mitigate risk. Monitor RadiusTheme's official channels for updates and apply patches promptly once available.