The vulnerability CVE-2025-47571 affects the highwarden Super Store Finder WordPress plugin prior to version 7.8. It is caused by improper control of the filename parameter in PHP include or require statements, resulting in a Local File Inclusion vulnerability. This allows an attacker to include and execute arbitrary files on the server, potentially leading to full compromise of the system. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or access sensitive files on the affected server, leading to full compromise of confidentiality, integrity, and availability of the system running the vulnerable plugin. The high CVSS score reflects the serious impact, although exploitation requires user interaction and has high complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the vulnerable plugin to prevent exploitation. Monitor official highwarden communications for updates or patches addressing this vulnerability.