The vulnerability CVE-2025-53247 in wpinterface BlogMarks (<= 1.0.8) is caused by improper validation of filenames used in PHP include or require statements. This allows an attacker to perform Local File Inclusion (LFI), potentially exposing sensitive files or enabling code execution. The CVSS 3.1 base score is 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently documented.

Successful exploitation of this vulnerability can lead to disclosure of sensitive local files, unauthorized code execution, and full compromise of the affected system's confidentiality, integrity, and availability. The high CVSS score reflects the critical nature of these impacts. However, exploitation complexity is high, and no known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable installations and applying general PHP hardening measures relevant to file inclusion vulnerabilities. Monitor official wpinterface channels for updates and apply patches promptly once released.