The vulnerability CVE-2025-32657 affects RadiusTheme's Testimonial Slider And Showcase Pro plugin up to version 2.1.7. It arises from improper validation or control of filenames used in PHP include or require statements, enabling PHP Local File Inclusion. This can allow an attacker with low privileges to execute arbitrary local files, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.5, reflecting network attack vector, high impact, and low privileges required. No patch or vendor advisory is currently available, and no exploits are known in the wild.

Successful exploitation of this vulnerability can lead to local file inclusion, allowing attackers to execute arbitrary code or access sensitive files on the server. This compromises the confidentiality, integrity, and availability of the affected system. The attack requires network access and low privileges but no user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable plugin and consider disabling or removing it if not essential. Monitor for updates from RadiusTheme regarding patches or mitigations.