This vulnerability (CWE-98) in THEMELOGI Wanium affects versions up to 1.9.8 and involves improper control of filenames used in PHP include or require statements, enabling unauthenticated local file inclusion. The CVSS 3.1 score of 8.1 reflects high impact on confidentiality, integrity, and availability with network attack vector, high attack complexity, and no privileges or user interaction required. No official patch or remediation guidance is currently available from the vendor, and no known exploits in the wild have been reported.

Successful exploitation allows an unauthenticated attacker to include local files on the server, potentially leading to remote code execution and full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable application and monitor for suspicious activity related to file inclusion attempts.