cleantalk
Vulnerabilities and Security Researches

Sparkle Elementor Kit, CVE-2025-32157

CVE, Research URL

CVE-2025-32157

Application

Sparkle Elementor Kit

Published on
Apr 04, 2025
Research Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jakub Glos Sparkle Elementor Kit allows PHP Local File Inclusion. This issue affects Sparkle Elementor Kit: from n/a through 2.0.9.
Affected versions
Min -, max 2.0.9.
Status
vulnerable