plugin

Grou Random Image Widget Vulnerabilities

5 known security issues reported for the Grou Random Image Widget WordPress plugin. Most recent disclosed May 15, 2023.

1 high

Running Grou Random Image Widget on your site? Check whether your installed version is affected.

Scan your site free

Grou Random Image Widget [grou-random-image-widget] < 1.1

unknown

Update plugin. An unknown person discovered and reported this Full Path Disclosure (FPD) vulnerability in WordPress Random Image Widget Plugin. This vulnerability has been fixed in version 1.1.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
May 15, 2023

Grou Random Image Widget [grou-random-image-widget] < 1.1 (closed)

unknown

This plugin is prone to a full path disclosure vulnerability. Update plugin.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
May 15, 2015

Grou Random Image Widget <= 1.18 - Full Path Disclosure

high

The Grou Random Image Widget plugin for WordPress is vulnerable to Full Path Disclosure via the 'g-random-img.php' file. This makes it possible for unauthenticated attackers to obtain the full path to a hosted installation when accessing that file.

CVSS:
7.5
Affected:
up to *
Fix:
No patched version reported
Disclosed:
Dec 24, 2012

Grou Random Image Widget [grou-random-image-widget] <= 1.18 (unfixed + closed)

unknown

The Grou Random Image Widget plugin for WordPress is vulnerable to Full Path Disclosure via the 'g-random-img.php' file. This makes it possible for unauthenticated attackers to obtain the full path to a hosted installation when accessing that file.

Affected:
up to 1.18
Fix:
No patched version reported
Disclosed:
Dec 24, 2012

Grou Random Image Widget [grou-random-image-widget] <= 1.18 (unfixed + closed)

unknown

The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability.

Affected:
up to 1.18
Fix:
No patched version reported

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database