The vulnerability CVE-2025-6326 affects AncoraThemes Inset theme versions up to 1.18.0. It is caused by improper validation or control of filenames used in PHP include or require statements, resulting in a Local File Inclusion vulnerability. This can allow attackers to include arbitrary local files, potentially leading to code execution or information disclosure. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. No patch or official fix has been documented in the provided data. The vulnerability is not related to a cloud service and no known active exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker to include and execute arbitrary local files on the server running the vulnerable AncoraThemes Inset theme. This may lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The high CVSS score (8.1) indicates that the impact on confidentiality, integrity, and availability is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable AncoraThemes Inset theme or applying any temporary mitigations recommended by the vendor. Monitor official AncoraThemes channels for updates and apply patches promptly once available.