A vulnerability was found in meREX Imba Plugin up to 1.5.0 on WordPress. It has been declared as problematic. This affects an unknown part. The manipulation results in improper control of filename for include/require statement in php program ('php remote file inclusion').
This vulnerability is known as CVE-2025-69106. It is possible to launch the attack remotely. No exploit is available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2025-69106 | meREX Imba Plugin up to 1.5.0 on WordPress filename control (EUVD-2025-210252)
A vulnerability was found in meREX Imba Plugin up to 1.5.0 on WordPress. It has been declared as problematic. This affects an unknown part. The manipulation results in improper control of filename for include/require statement in php…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR