This vulnerability in AncoraThemes Netmix arises from improper validation of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. The issue affects versions up to 1.0.10. Exploitation could allow an attacker to include local files on the server, potentially resulting in arbitrary code execution or disclosure of sensitive information. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. No patch or vendor advisory details are available to confirm remediation status.

Successful exploitation can lead to high impact on confidentiality, integrity, and availability of the affected system by allowing local file inclusion and possible remote code execution. This can compromise the server hosting the Netmix product and any data it processes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable components and applying general PHP security best practices to limit exposure.