What is the CVSS score of CVE-2025-52744?

CVE-2025-52744 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2025-52744?

Within 24 hours: Identify all instances of Inpersttion For Theme across your infrastructure and document affected systems. Within 7 days: Implement compensating controls including WAF rules to block malicious code injection payloads, disable theme features if non-critical, and apply strict input validation. Within 30 days: Monitor vendor communications for patch availability and establish an expedited deployment plan; consider theme replacement if no patch timeline is provided.

CVE-2025-52744

HIGH

Code Injection (CWE-94)

2026-02-20 audit@patchstack.com

Code Injection RCE

7.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:43 vuln.today

cvss_changed

CVSS changed

Apr 23, 2026 - 15:43 NVD

7.6 (HIGH) 7.7 (HIGH)

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

CVE Published

Feb 20, 2026 - 16:22 nvd

HIGH 7.6

DescriptionCVE.org

Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpersttion For Theme: from n/a through <= 1.0.

AnalysisAI

Technical ContextAI

Classified as CWE-94 (Code Injection). Affects inpersttion Inpersttion For Theme err-our-team. Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpersttion For Theme: from n/a through <= 1.0.