CVE-2025-48119: Improper Control of Generation of Code ('Code Injection') in RS WP THEMES RS WP Book Showcase
Improper Control of Generation of Code ('Code Injection') vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows Code Injection.This issue affects RS WP Book Showcase: from n/a through <= 6.7.59.
AI Analysis
Technical Summary
This vulnerability in RS WP Book Showcase arises from improper control over code generation, enabling an attacker to inject code. The issue affects all versions up to 6.7.59. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates that the vulnerability can be exploited remotely without authentication or user interaction, resulting in limited confidentiality impact but no integrity or availability impact. No official patch or vendor advisory is currently provided, and no known exploits have been reported.
Potential Impact
An attacker can remotely inject code due to improper control of code generation, potentially leading to limited confidentiality loss. There is no reported impact on integrity or availability. No known exploitation in the wild has been observed.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from RS WP THEMES and apply patches promptly once available.
CVE-2025-48119: Improper Control of Generation of Code ('Code Injection') in RS WP THEMES RS WP Book Showcase
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows Code Injection.This issue affects RS WP Book Showcase: from n/a through <= 6.7.59.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in RS WP Book Showcase arises from improper control over code generation, enabling an attacker to inject code. The issue affects all versions up to 6.7.59. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates that the vulnerability can be exploited remotely without authentication or user interaction, resulting in limited confidentiality impact but no integrity or availability impact. No official patch or vendor advisory is currently provided, and no known exploits have been reported.
Potential Impact
An attacker can remotely inject code due to improper control of code generation, potentially leading to limited confidentiality loss. There is no reported impact on integrity or availability. No known exploitation in the wild has been observed.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from RS WP THEMES and apply patches promptly once available.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Patchstack
- Date Reserved
- 2025-05-15T18:01:15.809Z
- Cisa Enriched
- true
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 682cd0f91484d88663aebcb0
Added to database: 5/20/2025, 6:59:05 PM
Last enriched: 5/1/2026, 2:43:39 PM
Last updated: 5/9/2026, 11:19:47 PM
Views: 78
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.