Ghost Kit – Page Builder Blocks & Extensions, CVE-2025-53567

CVE, Research URL: CVE-2025-53567
Home page URL: Security reports for Ghost Kit – Page Builder Blocks & Extensions
Application: Ghost Kit – Page Builder Blocks & Extensions
Published on: Aug 20, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Ghost Kit ghostkit allows PHP Local File Inclusion.This issue affects Ghost Kit: from n/a through <= 3.4.1.
Affected versions: max 3.4.2.
Status: vulnerable

Ghost Kit – Page Builder Blocks &amp; Extensions, CVE-2025-53567