Hotwptemplates Hot Random Image
2 CVEs affecting Hotwptemplates Hot Random Image. Latest disclosed: 2025-05-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4405 | Medium | 4.9 | 2025-05-22 | The Hot Random Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.9.2 due… |
CVE-2025-4419 | Medium | 4.3 | 2025-05-22 | The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 via the 'path' parameter. This makes it p… |