The dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme versions up to 1.9.3 suffer from improper control of filenames used in PHP include or require statements. This vulnerability, classified as PHP Local File Inclusion, allows an attacker to manipulate the filename parameter to include unintended local files. The vulnerability has a CVSS v3.1 base score of 8.1, indicating high impact with network attack vector, high attack complexity, no privileges required, no user interaction, and full confidentiality, integrity, and availability impact. No patch or official fix has been documented in the provided data.

Successful exploitation could lead to local file inclusion, allowing attackers to read sensitive files, execute arbitrary code, or cause denial of service, impacting confidentiality, integrity, and availability of the affected WordPress site. The high CVSS score reflects the severity of these impacts. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected theme to prevent exploitation. Monitor vendor channels for updates and apply patches promptly once released.