Skip to content

hotwptemplates Hot Random Image

CVE-2025-4419 Medium 4.3 Hot Random Image <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter 0.5%
CVE-2025-4405 Medium 4.9 Hot Random Image <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter 0.3%