PT-2026-22091 · WordPress · Wp Responsive Images

Dj + 1 · Published 2026-02-26 · Updated 2026-03-18 · CVE-2026-1557

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP Responsive Images plugin for WordPress versions prior to 1.1

Description The WP Responsive Images plugin for WordPress is susceptible to a Path Traversal issue in versions up to and including 1.0. This allows unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information, through manipulation of the src parameter.

Recommendations Update the WP Responsive Images plugin to version 1.1 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-1557

Affected Products

Wp Responsive Images

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2026-1557 · Security Note
• https://twitter.com/CVEnew/status/2027004223838101806 · Twitter Post
• https://t.me/cveNotify/153278 · Telegram Post
• https://plugins.trac.wordpress.org/browser/wp-responsive-images/trunk/WPResponsiveImages.php#L265 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/22c6f81b-d456-44b9-ba6c-8b207a9ee6e1?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wp-responsive-images/trunk/image_handler.php#L28 · Note
• https://plugins.trac.wordpress.org/browser/wp-responsive-images/tags/1.0/image_handler.php#L28 · Note
• https://plugins.trac.wordpress.org/browser/wp-responsive-images/tags/1.0/SBOutputFile.php#L33 · Note
• https://plugins.trac.wordpress.org/browser/wp-responsive-images/trunk/SBOutputFile.php#L33 · Note
• https://plugins.trac.wordpress.org/browser/wp-responsive-images/tags/1.0/WPResponsiveImages.php#L265 · Note
• https://twitter.com/pdnuclei_bot/status/2034162926412828914 · Twitter Post
• https://twitter.com/cracbot/status/2028787629182095721 · Twitter Post