The vulnerability CVE-2025-60073 affects the Processby Responsive Sidebar plugin through improper control of filenames in PHP include/require statements, resulting in PHP Local File Inclusion. This can allow an attacker to include unintended local files, potentially leading to code execution or information disclosure. The issue affects all versions up to and including 1.2.2. The CVSS 3.1 base score is 7.5, reflecting high impact with network attack vector, high attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available.

Successful exploitation of this vulnerability could allow an attacker to include local files on the server, which may lead to arbitrary code execution, data disclosure, or denial of service. The high CVSS score indicates a serious risk to system confidentiality, integrity, and availability. However, there are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected Responsive Sidebar plugin versions. Avoid exposing the vulnerable component to untrusted users and restrict access where possible.