The vulnerability CVE-2025-53442 in axiomthemes Rentic arises from improper control over the filename parameter in PHP include/require statements, enabling PHP Local File Inclusion. This flaw affects Rentic versions up to 1.1. The CVSS 3.1 base score is 8.1, indicating high severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available.

Successful exploitation of this vulnerability allows an attacker to include local files on the server, which can lead to disclosure of sensitive information, code execution, and full system compromise. The CVSS score of 8.1 reflects a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable versions and applying general PHP security best practices relevant to file inclusion vulnerabilities.