CVE-2025-26548 WordPress Random Image Selector plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Random Image Selector allows Reflected XSS. This issue affects Random Image Selector: from n/a through 2.4...

CVE-2025-26548

CVE-2025-26548 is a WordPress Random Image Selector plugin vulnerability: Reflected XSS due to improper input neutralization during page generation. Affected versions are up to 2.4; no remediation details are provided in the supplied documents.