The vulnerability CVE-2025-67935 in Mikado-Themes Optimize plugin arises from improper validation or control of filenames used in PHP include or require statements. This allows an attacker to perform Local File Inclusion, potentially executing arbitrary code or accessing sensitive files on the server. The issue affects all versions before 2.4. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and no privileges or user interaction required. No patch or official fix details are currently available, and the plugin is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability could lead to local file inclusion, allowing attackers to read sensitive files or execute arbitrary code on the affected server. This compromises confidentiality, integrity, and availability of the system running the vulnerable plugin. The high CVSS score (8.1) reflects the severity of potential impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable plugin to prevent exploitation. Monitor Mikado-Themes official channels for updates and apply patches promptly once available.