WP Responsive Images <= 1.0 - Arbitrary File Read
CVE-2026-1557
Verified
Description
WP Responsive Images plugin for WordPress <= 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server.
Severity
High
CVSS Score
7.5
Exploit Probability
2%
Published Date
March 12, 2026
Template Author
shivam kamboj
CVE-2026-1557.yaml
7.5Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2026-1557
Remediation Steps
Update to the latest version of WP Responsive Images plugin.