https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:08:31.068490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-8905 CVE-2025-8905 — Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call 2026-10-10T12:08:31.094873+00:00

Affected: Inpersttion For Theme

The Inpersttion For Theme plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the theme_section_shortcode() function. This is due to the plugin not restricting what functions can be called. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server which is limited to arbitrary functions without any user supplied parameters.