This vulnerability in AncoraThemes Coworking (<= 1.6.1) arises from improper validation or control of filenames used in PHP include or require statements, enabling PHP Local File Inclusion. The CVSS 3.1 score is 8.1, indicating high impact with network attack vector, high complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. The issue allows an attacker to potentially execute arbitrary code or access sensitive files by including local files on the server.

Successful exploitation can lead to local file inclusion, which may allow attackers to read sensitive files, execute arbitrary code, or cause denial of service. The CVSS score of 8.1 reflects high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is provided in the available data, users should monitor AncoraThemes communications for updates. Until a fix is available, restricting access to the affected application and limiting exposure to untrusted users may reduce risk.