Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:16:26 +0000 CVE-2025-4419 — Hot Random Image <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Para… https://cve.radiocsirt.org/vuln/cve-2025-4419 <p><strong>Affected:</strong> hotwptemplates Hot Random Image</p> <p>The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 via the &#39;path&#39; parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to access arbitrary images with allowed extensions, outside of the originally intended directory.</p> <p><strong>Affected:</strong> hotwptemplates Hot Random Image</p> <p>The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 via the &#39;path&#39; parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to access arbitrary images with allowed extensions, outside of the originally intended directory.</p> https://cve.radiocsirt.org/vuln/cve-2025-4419