The vulnerability CVE-2025-64359 affects the StylemixThemes Consulting plugin for WordPress, specifically versions prior to 6.7.5. It arises from improper validation or control of filenames used in PHP include or require statements, enabling a Local File Inclusion attack. This can allow an attacker with limited privileges to include and execute arbitrary files on the server, potentially leading to complete system compromise. The CVSS v3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, and low privileges required. No patch or official fix details are currently available in the provided data.

Successful exploitation of this vulnerability can lead to local file inclusion, allowing attackers to read or execute arbitrary files on the affected server. This can result in full compromise of the system's confidentiality, integrity, and availability. Given the high CVSS score (7.5), the impact is significant, but exploitation requires low privileges and no user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users of the StylemixThemes Consulting plugin should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin or disabling it if feasible to reduce exposure.