Hot-Themes Hot Random Image
3 CVEs affecting Hot-Themes Hot Random Image. Latest disclosed: 2025-05-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-29796 | Medium | 6.5 | 2024-03-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hot Themes Hot Random Image allows Stored XSS.This issue… |
CVE-2025-4405 | Medium | 4.9 | 2025-05-22 | The Hot Random Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.9.2 due… |
CVE-2025-4419 | Medium | 4.3 | 2025-05-22 | The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 via the 'path' parameter. This makes it p… |