The vulnerability CVE-2025-53216 affects the themeuniver Glamer product up to version 1.0.2. It arises from improper validation or control of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. This can allow an attacker to include unintended files, potentially executing arbitrary code or accessing sensitive data. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high impact on confidentiality, integrity, and availability, but requiring high attack complexity and no privileges or user interaction.

Successful exploitation of this vulnerability could lead to full compromise of the affected system, including unauthorized disclosure of sensitive information, modification of data, and disruption of service. The high CVSS score reflects the potential for severe impact on the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints and applying any recommended temporary mitigations from the vendor. Monitor official themeuniver channels for updates.