This vulnerability in Responsive Posts Carousel Pro arises from improper validation of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. An attacker with low privileges and no user interaction required could exploit this remotely over the network, but the attack complexity is high. Successful exploitation could result in full compromise of the affected system's confidentiality, integrity, and availability. The issue affects versions up to 15.1. No known exploits are reported in the wild, and no patch or vendor advisory is currently available.

If exploited, this vulnerability could allow an attacker to include and execute arbitrary local files on the server, leading to potential full system compromise including data disclosure, modification, or denial of service. The CVSS score of 7.5 reflects high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the vulnerable plugin and limit exposure by applying strict access controls. Monitor vendor channels for updates and apply patches promptly once available.