The vulnerability CVE-2025-53446 in axiomthemes Beautique arises from improper validation of filenames used in PHP include or require statements, resulting in a Local File Inclusion (LFI) flaw. This allows an attacker to include local files on the server, potentially leading to arbitrary code execution or disclosure of sensitive information. The issue affects Beautique versions up to 1.5. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official fix information is provided in the available data.

Successful exploitation of this vulnerability could lead to arbitrary local file inclusion, which may allow attackers to execute malicious code, access sensitive files, or disrupt service on the affected system. The high CVSS score indicates significant potential impact on confidentiality, integrity, and availability of the affected environment. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users of axiomthemes Beautique should monitor vendor communications for updates. Until a fix is available, consider restricting access to vulnerable endpoints and applying web application firewall rules to detect and block suspicious include/require requests related to this vulnerability.