This vulnerability in AncoraThemes Pearson Specter arises from improper validation of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. It affects all versions up to and including 1.11.3. The issue allows an attacker to include local files on the server, which can lead to code execution or information disclosure. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. No patch or official fix information is currently available from the vendor or advisories.

Successful exploitation can result in local file inclusion, potentially allowing attackers to execute arbitrary code, access sensitive files, or disrupt service. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints, applying web application firewalls to detect suspicious requests, and limiting file inclusion functionality if configurable. Avoid exposing the vulnerable application to untrusted networks.