The vulnerability CVE-2025-53429 affects AncoraThemes Exit Game up to version 1.4.3 and stems from improper control of filenames used in PHP include or require statements. This weakness enables PHP Local File Inclusion, which can allow an attacker to execute arbitrary code or access sensitive files on the server. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability with network attack vector, high attack complexity, no privileges required, and no user interaction needed. No patch or mitigation details are provided in the available data.

Successful exploitation of this vulnerability can lead to local file inclusion on the server hosting Exit Game, potentially allowing attackers to read sensitive files, execute arbitrary PHP code, and fully compromise the system's confidentiality, integrity, and availability. The high CVSS score indicates a significant security risk. No known exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the vulnerable application and applying any recommended workarounds from AncoraThemes if published. Monitor vendor channels for updates.