This vulnerability in AncoraThemes Mamita versions up to 1.0.9 arises from improper validation or control of filenames used in PHP include or require statements, enabling PHP Local File Inclusion. This can allow an attacker to include and execute arbitrary local files on the server, potentially leading to full system compromise. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. The attack vector is network-based with high complexity and no required privileges or user interaction.

Successful exploitation can result in full compromise of the affected system's confidentiality, integrity, and availability due to local file inclusion. This may allow attackers to execute arbitrary code or access sensitive files on the server running the vulnerable Mamita version.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a fix is available, users should consider restricting access to vulnerable endpoints and monitor for suspicious activity related to file inclusion attempts.