What’s Vulnerable › Products

hotwptemplates Hot Random Image vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your hotwptemplates Hot Random Image version is affected

Latest hotwptemplates Hot Random Image vulnerabilities

• CVE-2025-4419 — Hot Random Image <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter (CVSS 4.3)
• CVE-2025-4405 — Hot Random Image <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter (CVSS 5.4)
• CVE-2024-29796 — WordPress Hot Random Image plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)