Cyber Posture

CVE-2025-52744

HighRCE

Published: 20 February 2026

Published
20 February 2026
Modified
27 April 2026
KEV Added
Patch
CVSS Score 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
EPSS Score 0.0007 21.1th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-52744 is a high-severity Code Injection (CWE-94) vulnerability. Its CVSS base score is 7.7 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 21.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploit Public-Facing Application (T1190) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

SI-10 directly prevents code injection (CWE-94) in the Inpersttion WordPress plugin by validating and sanitizing user inputs to block malicious code generation.

prevent

SI-2 mitigates CVE-2025-52744 by requiring timely identification, reporting, and remediation of the flaw in plugin versions <=1.0 through patching or removal.

prevent

AC-6 reduces the exploitability of this PR:L code injection vulnerability by enforcing least privilege, limiting low-privileged users' access to the vulnerable plugin functionality.

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1100 Web Shell Persistence
A Web shell is a Web script that is placed on an openly accessible Web server to allow an adversary to use the Web server as a gateway into a network.
Why these techniques?

Code injection (CWE-94) in public-facing WordPress plugin directly enables exploitation of the web application (T1190) and facilitates deployment/execution of a web shell for arbitrary code execution (T1100).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpersttion For Theme: from n/a through <= 1.0.

Deeper analysisAI

CVE-2025-52744 is an Improper Control of Generation of Code ('Code Injection') vulnerability, classified as CWE-94, in the Inpersttion For Theme err-our-team WordPress plugin. This issue affects all versions from n/a through 1.0 inclusive. Published on 2026-02-20, it carries a CVSS v3.1 base score of 7.7 (High), with vector AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L.

Low-privileged users (PR:L) can exploit this vulnerability over the network (AV:N) with high attack complexity (AC:H) and without requiring user interaction (UI:N). Exploitation changes scope (S:C), enabling high confidentiality impact (C:H) alongside low integrity (I:L) and availability (A:L) effects, allowing code injection that leads to arbitrary code execution.

The Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/err-our-team/vulnerability/wordpress-inpersttion-for-theme-plugin-1-0-arbitrary-code-execution-vulnerability?_s_id=cve documents this as an arbitrary code execution vulnerability in the plugin version 1.0 and provides further details on the issue.

Details

CWE(s)

CVEs Like This One

CVE-2024-54724Shared CWE-94
CVE-2025-10057Shared CWE-94
CVE-2026-25447Shared CWE-94
CVE-2025-23209Shared CWE-94
CVE-2026-39440Shared CWE-94
CVE-2026-3300Shared CWE-94
CVE-2025-6389Shared CWE-94
CVE-2025-8723Shared CWE-94
CVE-2025-34277Shared CWE-94
CVE-2025-57141Shared CWE-94

References