The vulnerability CVE-2025-47695 affects solwin Blog Designer PRO through improper validation of filenames used in PHP include or require statements, enabling remote file inclusion. This can allow an attacker to execute arbitrary code remotely by including malicious files. The CVSS 3.1 score is 7.5, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, and low privileges required. The affected versions include all up to 3.4.7. No patch or official remediation details are currently provided.

Successful exploitation could lead to remote code execution, allowing attackers to compromise the confidentiality, integrity, and availability of the affected system. Given the high CVSS score and the nature of remote file inclusion, the impact is significant, potentially enabling full system compromise. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting the vulnerable functionality if possible, and apply strict input validation or web application firewall rules to block malicious requests targeting include/require parameters. Monitor vendor channels for updates and patches.