The vulnerability CVE-2025-69374 in SolverWp Eleblog – Elementor Blog And Magazine Addons arises from improper control over the filename parameter used in PHP include or require statements. This flaw enables PHP Local File Inclusion (LFI), which can allow an attacker to read sensitive files or execute arbitrary code depending on the server configuration. The affected versions include all releases up to 2.0.3. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability can lead to local file inclusion on the server running the affected plugin, potentially exposing sensitive information or enabling further code execution attacks. The CVSS score of 8.1 reflects a high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin versions to mitigate risk. Monitor official SolverWp channels for updates and apply patches promptly once available.