The vulnerability CVE-2025-69034 affects Mikado-Themes Lekker PHP software up to version 1.8. It arises from improper control of filenames used in include or require statements, enabling PHP Local File Inclusion. This can allow an attacker to include and execute arbitrary local files on the server, potentially leading to full system compromise. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory details are currently available.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability due to local file inclusion. This may allow attackers to execute arbitrary code or access sensitive files. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable installations and applying general PHP security best practices relevant to file inclusion vulnerabilities.