The vulnerability CVE-2025-53441 in axiomthemes Greeny theme arises from improper validation or control of filenames used in PHP include or require statements. This allows an attacker to perform Local File Inclusion (LFI), potentially leading to arbitrary file disclosure or code execution. The issue affects Greeny versions up to and including 2.6. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is no vendor-provided patch or advisory available at this time, and the product is not a cloud service, so remediation depends on vendor updates or user intervention.

Successful exploitation of this vulnerability can lead to disclosure of sensitive files on the server, unauthorized code execution, and full compromise of the affected system's confidentiality, integrity, and availability. The high CVSS score reflects these severe potential impacts. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected theme version or restricting access to vulnerable endpoints to mitigate risk. Monitor official axiomthemes communications for updates.