This vulnerability involves a path traversal flaw in the Mikado-Themes Wanderland product, specifically allowing the use of the '.../...//' sequence to perform PHP Local File Inclusion. This enables an attacker to include and execute arbitrary local files on the server, potentially leading to remote code execution or data disclosure. The issue affects versions up to and including 1.7.1. The CVSS 3.1 score is 8.1, indicating high impact with network attack vector, high attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability.

Successful exploitation can result in full compromise of the affected system's confidentiality, integrity, and availability due to local file inclusion. This could allow attackers to execute arbitrary code or access sensitive files. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for suspicious activity related to file inclusion attempts.