The vulnerability CVE-2025-69374 in SolverWp Eleblog – Elementor Blog And Magazine Addons arises from improper control of filenames used in PHP include or require statements, resulting in a PHP Local File Inclusion issue. This flaw exists in versions up to 2.0.3 of the plugin. The CVSS v3.1 score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor or other sources.

Successful exploitation could allow an unauthenticated attacker to include local files on the server, potentially leading to arbitrary code execution, disclosure of sensitive information, or denial of service. The high CVSS score reflects significant impact on confidentiality, integrity, and availability of affected systems. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected plugin version to mitigate risk. Monitor vendor channels for updates or patches addressing this vulnerability.