immonex Kickstart for Elementor Security & Risk Analysis

wordpress.org/plugins/immonex-kickstart-for-elementor

35+ widgets and dynamic tags for creating professional real estate websites with immonex Kickstart and Elementor

0 active installs v1.1.8 PHP 8.3+ WP 6.5+ Updated Mar 10, 2026
elementorimmobilienimmobilienmakleropenimmorealestate
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is immonex Kickstart for Elementor Safe to Use in 2026?

Generally Safe

Score 100/100

immonex Kickstart for Elementor has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The immmonex-kickstart-for-elementor v1.1.8 plugin exhibits a generally good security posture in terms of its attack surface, with no identified AJAX handlers, REST API routes, shortcodes, or cron events, and thus no unprotected entry points. The code also demonstrates strong practices regarding SQL queries, utilizing prepared statements exclusively. However, a significant concern arises from the output escaping, where only 38% of outputs are properly escaped. This low percentage suggests a high likelihood of Cross-Site Scripting (XSS) vulnerabilities, especially given the absence of specific taint flow analysis results, which could mask such issues. The plugin's vulnerability history is clean, with no known CVEs, which is a positive indicator, but it doesn't negate the risks identified in the static analysis. The absence of nonces and capability checks on potential entry points, though currently not exposed, is a weakness that could be exploited if new entry points are introduced or if the existing structure is bypassed.

Key Concerns

  • Low percentage of properly escaped output
  • Absence of nonce checks
  • Absence of capability checks
Vulnerabilities
None known

immonex Kickstart for Elementor Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

immonex Kickstart for Elementor Release Timeline

v1.1.8Current
Code Analysis
Analyzed Apr 16, 2026

immonex Kickstart for Elementor Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
16
10 escaped
Nonce Checks
0
Capability Checks
0
File Operations
3
External Requests
0
Bundled Libraries
0

Output Escaping

38% escaped26 total outputs
Attack Surface

immonex Kickstart for Elementor Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 18
actionelementor/elements/categories_registeredincludes/class-elementor-bootstrap.php:67
actionelementor/widgets/registerincludes/class-elementor-bootstrap.php:68
actionelementor/editor/before_enqueue_scriptsincludes/class-elementor-bootstrap.php:69
actionelementor/widget/before_render_contentincludes/class-elementor-bootstrap.php:70
actionelementor/dynamic_tags/registerincludes/class-elementor-bootstrap.php:73
actionelementor/dynamic_tags/registerincludes/class-elementor-bootstrap.php:74
filteroption_elementor_element_cache_ttlincludes/class-elementor-bootstrap.php:77
filterelementor/query/query_argsincludes/class-elementor-bootstrap.php:78
filterinxkickel_get_plugin_dirincludes/class-kickstart-for-elementor.php:192
filterinxkickel_get_utilsincludes/class-kickstart-for-elementor.php:200
filterimmonex-kickstart_option_tabsincludes/class-kickstart-for-elementor.php:208
filterimmonex-kickstart_option_sectionsincludes/class-kickstart-for-elementor.php:209
filterimmonex-kickstart_option_fieldsincludes/class-kickstart-for-elementor.php:210
filterinxkickel_supported_post_typesincludes/class-kickstart-for-elementor.php:213
filterinxkickel_supported_tax_termsincludes/class-kickstart-for-elementor.php:214
filterinxkickel_mapping_select_optionsincludes/class-mapping-table.php:86
filterwp_get_attachment_linkincludes/components/widgets/single-property/class-basic-gallery-widget.php:401
filterinxkickpr_standard_header_print_linkincludes/components/widgets/single-property/class-native-head-widget.php:364
Maintenance & Trust

immonex Kickstart for Elementor Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedMar 10, 2026
PHP min version8.3
Downloads251

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

immonex Kickstart for Elementor Developer Profile

immonex

3 plugins · 500 total installs

93
trust score
Avg Security Score
98/100
Avg Patch Time
28 days
View full developer profile
Detection Fingerprints

How We Detect immonex Kickstart for Elementor

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/immonex-kickstart-for-elementor/assets/css/elementor-widgets.css/wp-content/plugins/immonex-kickstart-for-elementor/assets/js/elementor-widgets.js/wp-content/plugins/immonex-kickstart-for-elementor/assets/css/elementor-editor.css/wp-content/plugins/immonex-kickstart-for-elementor/assets/js/elementor-editor.js
Script Paths
/wp-content/plugins/immonex-kickstart-for-elementor/assets/js/elementor-widgets.js/wp-content/plugins/immonex-kickstart-for-elementor/assets/js/elementor-editor.js
Version Parameters
immonex-kickstart-for-elementor/assets/css/elementor-widgets.css?ver=immonex-kickstart-for-elementor/assets/js/elementor-widgets.js?ver=immonex-kickstart-for-elementor/assets/css/elementor-editor.css?ver=immonex-kickstart-for-elementor/assets/js/elementor-editor.js?ver=

HTML / DOM Fingerprints

CSS Classes
elementor-widget-wrapelementor-elementelementor-element-populated
Data Attributes
data-elementor-iddata-elementor-post-type
JS Globals
immonex_kickstart_elementor
REST Endpoints
/wp-json/inxkickel/v1/settings/wp-json/inxkickel/v1/terms/wp-json/inxkickel/v1/properties/wp-json/inxkickel/v1/property-types/wp-json/inxkickel/v1/listing-statuses/wp-json/inxkickel/v1/listing-types/wp-json/inxkickel/v1/energy-certificate
FAQ

Frequently Asked Questions about immonex Kickstart for Elementor