This vulnerability in Mikado-Themes Emaurri arises from improper validation of filenames used in PHP include or require statements, enabling local file inclusion attacks. Affected versions include all releases up to and including 1.0.1. Exploitation can result in high impact on confidentiality, integrity, and availability of the affected system. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and unchanged scope.

Successful exploitation can lead to local file inclusion, allowing attackers to read or execute arbitrary files on the server. This can compromise sensitive data, alter application behavior, or disrupt service availability. The CVSS score of 8.1 reflects high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable components and applying any recommended temporary mitigations from the vendor. Monitor official Mikado-Themes communications for updates.