CVE-2025-52828 is a Deserialization of Untrusted Data vulnerability (CWE-502) affecting the designthemes Red Art redart plugin versions up to and including 3.8, allowing for Object Injection. This high-severity vulnerability (CVSS 8.8) can be exploited remotely over the network with low attack complexity and requires low privileges. Successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected system. Currently, there is no public exploit code available, it is not listed in CISA's KEV catalog, and there is no indication of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Designthemes | Red Art | >= 0, <= 3.8CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.