This vulnerability in Mikado-Themes Verdure arises from improper validation of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. The affected versions include all releases up to and including 1.6. Exploitation could allow an unauthenticated attacker to include local files, resulting in high confidentiality, integrity, and availability impacts as reflected by the CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. No vendor advisory or patch information is available, and the product is not a cloud service.

Successful exploitation could lead to remote code execution or disclosure of sensitive information by including local files on the server. The vulnerability affects confidentiality, integrity, and availability with high severity. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints and applying general PHP security best practices relevant to file inclusion vulnerabilities.