The vulnerability CVE-2025-53450 in Pluginwale Easy Pricing Table WP arises from improper validation of filenames used in PHP include or require statements. This flaw allows an attacker with at least low privileges and no user interaction to perform local file inclusion, potentially leading to disclosure or modification of sensitive files and disruption of service. The vulnerability affects all versions up to 1.1.3. The attack vector is network-based with high complexity required, and the impact includes high confidentiality, integrity, and availability losses. No patch or official fix has been documented as of the publication date.

Successful exploitation could allow an attacker to include and execute local files on the server running the vulnerable plugin, leading to potential disclosure of sensitive information, unauthorized code execution, and denial of service. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the affected plugin version to mitigate risk. Avoid exposing the affected plugin to untrusted users or networks. Monitor vendor channels for updates or patches addressing this vulnerability.