This vulnerability in axiomthemes PJ | Life & Business Coaching allows an attacker to exploit improper control over filenames in PHP include/require statements, resulting in PHP Local File Inclusion. This can lead to unauthorized disclosure, modification, or disruption of the application. The affected versions are from initial releases through 3.0.0. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability at a high level.

Successful exploitation could allow an attacker to include local files on the server, potentially leading to disclosure of sensitive information, code execution, or denial of service. The high CVSS score reflects significant risk to confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Users should monitor vendor communications for updates and consider restricting access to vulnerable components or applying temporary mitigations if available.