Skip to content
OpenAdvisories
High · 7.5 CVE-2025-58637 EUVD-2025-26534GHSA-r3pv-6735-x6j5

WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability

Published Sep 3, 2025 · Updated May 13, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in immonex immonex Kickstart immonex-kickstart allows PHP Local File Inclusion.This issue affects immonex Kickstart: from n/a through <= 1.11.6.

Affected products

VendorProductAffectedFixed
immonex immonex Kickstart ≤ 1.11.6 —

References