CVE-2025-53435 describes a PHP Local File Inclusion vulnerability in axiomthemes Plan My Day versions up to 1.1.13. The vulnerability arises from improper control over the filename used in include or require statements within the PHP code, allowing an attacker to include unintended local files. This can lead to execution of arbitrary code or disclosure of sensitive information. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but lacks vendor-provided patch or mitigation details at this time. The product is not cloud-hosted, so remediation requires user action once a fix is available.

Successful exploitation of this vulnerability can lead to local file inclusion, which may allow attackers to execute arbitrary code, access sensitive files, or disrupt service. The CVSS score of 8.1 indicates high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the vulnerable application and applying general PHP security best practices may reduce exposure.