hotwptemplates
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Hot Random Image | 2 | – | May 22, 2025 |
Exploited and recent CVEs
- CVE-2025-4419 Hot Random Image <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter 0.5%
- CVE-2025-4405 Hot Random Image <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter 0.3%