The vulnerability CVE-2025-53328 in the Opinion Stage Poll, Survey & Quiz Maker Plugin arises from improper validation or control of filenames used in PHP include or require statements. This flaw allows an attacker to perform Local File Inclusion (LFI), potentially enabling unauthorized access to sensitive files or code execution within the affected plugin. The issue affects all versions up to 19.11.0. The CVSS vector indicates the attack requires network access, high attack complexity, no privileges, and user interaction, with high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to include local files on the server, potentially leading to disclosure of sensitive information, code execution, or denial of service. The CVSS score of 7.5 reflects a high impact on confidentiality, integrity, and availability. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the Opinion Stage vendor communications for updates. Until a fix is available, consider disabling or removing the affected plugin version to mitigate risk.