Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: immonex Clear all filters
TI-2026-24467 CVE-2026-31918 · GHSA-2v58-fmf4-q6pv

WordPress immonex Kickstart plugin <= 1.13.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in immonex immonex Kickstart immonex-kickstart allows Stored XSS.This issue affects immonex Kickstart: from n/a through <…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00191 Published 2026-03-13 No fix listed CWE-79
TI-2025-35778 CVE-2025-57925 · GHSA-pwvv-rqmm-mwgj

WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in immonex immonex Kickstart Team immonex-kickstart-team allows PHP Local File Inclusion.This issue af…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00692 Published 2025-09-22 No fix listed CWE-98
TI-2025-36305 CVE-2025-58637 · GHSA-r3pv-6735-x6j5

WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in immonex immonex Kickstart immonex-kickstart allows PHP Local File Inclusion.This issue affects immo…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00523 Published 2025-09-03 No fix listed CWE-98