The vulnerability CVE-2025-60043 affects AncoraThemes Wanderic versions up to 1.0.10 and involves improper control of filenames used in PHP include or require statements. This weakness enables PHP Local File Inclusion, potentially allowing an attacker to include unauthorized files on the server. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and no required privileges or user interaction. No vendor advisory or patch information is available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to local file inclusion on the affected server, which may result in disclosure of sensitive information, code execution, and full system compromise. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable components and applying general PHP security best practices relevant to file inclusion vulnerabilities. Monitor official AncoraThemes channels for updates.