The vulnerability CVE-2025-53437 affects the ApusTheme Greenorganic WordPress theme (<= 2.45) and is caused by improper control over filenames used in PHP include or require statements. This leads to a Local File Inclusion vulnerability, allowing attackers to include arbitrary local files on the server. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided, and no known exploits have been reported.

Successful exploitation of this vulnerability can lead to disclosure of sensitive files on the server, potentially exposing configuration files, source code, or other sensitive data. It may also enable further attacks such as code execution depending on the server environment and included files. The high CVSS score indicates significant risk to confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the vulnerable theme or restricting access to affected endpoints. Monitor official ApusTheme channels for updates and apply patches promptly once released.