Plugin icon

Auto Featured Image (Auto Post Thumbnail)

auto-post-thumbnail

Vulnerabilities:

7

Last Updated:

March 16, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-12-15
Title
Auto Featured Image < 4.2.2 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification
Fixed in
Fixed in 4.2.2
CVSS
4.3 (medium)
Published
2025-10-27
Title
Auto Featured Image (Auto Post Thumbnail) < 4.2.0 - Authenticated (Author+) Server-Side Request Forgery
Fixed in
Fixed in 4.2.0
CVSS
7.7 (high)
Published
2024-07-11
Title
Auto Featured Image (Auto Post Thumbnail) < 4.1.3- Missing Authorization
Fixed in
Fixed in 4.1.3
CVSS
4.3 (medium)
Published
2024-05-30
Title
Auto Featured Image (Auto Post Thumbnail) <= 4.0.0 - Authenticated (Author+) Server-Side Request Forgery
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-04-25
Title
Auto Featured Image (Auto Post Thumbnail) < 4.1.4 - Author+ SSRF
Fixed in
Fixed in 4.1.4
CVSS
6.4 (medium)
Published
2023-02-14
Title
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
Fixed in
Fixed in 3.9.16
CVSS
9.1 (critical)
Published
2021-11-15
Title
Auto Featured Image < 3.9.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.9.3
CVSS
8.8 (high)