CVE-2026-1557
HIGH EXPLOITED NUCLEIWP Responsive Images <=1.0 - Path Traversal
Title source: llmExploitation Summary
CVE-2026-1557 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Sechunt3r. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2026-1557, demonstrating a path traversal vulnerability in the WP Responsive Images WordPress plugin (version <= 1.0). The exploit allows unauthenticated attackers to read arbitrary files on the server via the 'src' parameter in the image_handler.php script.
Description
The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Exploits (1)
The repository contains a functional exploit for CVE-2026-1557, demonstrating a path traversal vulnerability in the WP Responsive Images WordPress plugin (version <= 1.0). The exploit allows unauthenticated attackers to read arbitrary files on the server via the 'src' parameter in the image_handler.php script.
Nuclei Templates (1)
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N