Vulnerabilities

TI-2025-32794 CVE-2025-52744 · GHSA-cg8f-pcpw-6836

WordPress Inpersttion For Theme plugin <= 1.0 - Arbitrary Code Execution vulnerability

LOW 33

Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpersttion For Theme: from n/a through <= 1.0.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0029 Published 2026-02-20 No fix listed CWE-94

TI-2025-08152 CVE-2025-8905 · GHSA-wg9g-fpcg-qw8h

Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call

LOW 28

The Inpersttion For Theme plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the theme_section_shortcode() function.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00391 Published 2025-08-15 No fix listed CWE-94

TI-2024-18046 CVE-2024-27191 · GHSA-2g7p-7mvp-pw7m

WordPress Slivery Extender plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability

MEDIUM 40

Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Slivery Extender slivery-extender allows Remote Code Inclusion.This issue affects Slivery Extender: from n/a through <= 1.0.2.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00816 Published 2024-04-03 No fix listed CWE-94

Vulnerabilities

Filters

WordPress Inpersttion For Theme plugin <= 1.0 - Arbitrary Code Execution vulnerability

Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call

WordPress Slivery Extender plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability