The vulnerability CVE-2025-69062 affects AncoraThemes Weedles versions up to 1.1.12 and is caused by improper control of the filename parameter in PHP include/require statements. This flaw allows an attacker to perform Local File Inclusion (LFI), potentially enabling unauthorized file access and execution within the affected PHP application. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability, with network attack vector and no privileges or user interaction required. No official patch or remediation guidance is currently available from the vendor or other authoritative sources.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive files, code execution, and full system compromise due to the ability to include local files arbitrarily. The CVSS score of 8.1 indicates a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting the affected include/require functionality if possible and apply strict input validation or filtering on filename parameters to mitigate exploitation risk.