WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
feather-login-page
Published
2023-11-06
Title
Feather Login Page < 1.1.4 - CSRF
Slug
feather-login-page
Published
2024-04-10
Title
Feather Login Page < 1.1.6 - Cross-Site Request Forgery via saveData()
Slug
feather-login-page
Published
2025-11-05
Title
Feather Login Page <= 1.1.7 - Cross-Site Request Forgery
Slug
feature-comments
Published
2014-08-01
Title
Featured Comments 1.2.1 - wp-admin/admin-ajax.php Comment Status Manipulation CSRF
Slug
featured-content-gallery
Published
2024-05-06
Title
Featured Content Gallery <= 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
featured-image
Published
2025-11-10
Title
Featured Image < 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
featured-image-caption
Published
2023-11-06
Title
Featured Image Caption < 0.8.11 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2019-12-24
Title
Featured Image from URL <= 2.7.7 - Missing Access Controls on REST routes
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
featured-image-from-url
Published
2023-12-14
Title
Featured Image from URL (FIFU) < 4.5.4 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2024-02-19
Title
Featured Image from URL (FIFU) < 4.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
Slug
featured-image-from-url
Published
2024-06-28
Title
Featured Image from URL < 4.8.2 - Missing Authorization
Slug
featured-image-from-url
Published
2024-07-05
Title
Featured Image from URL < 4.8.3 - Missing Authorization
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Missing Authorization to Password Protected Post Disclosure
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Unauthenticated Information Exposure via Log File
Slug
featured-image-from-url
Published
2025-10-06
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
Slug
featured-image-from-url
Published
2026-01-09
Title
Featured Image from URL (FIFU) < 5.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
Slug
featured-image-generator
Published
2024-07-09
Title
Featured Image Generator < 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Images Upload
Slug
featured-image-generator
Published
2025-12-31
Title
Featured Image Generator <= 1.3.3 - Missing Authorization
Slug
featured-image-plus
Published
2025-05-29
Title
Featured Image Plus < 1.6.6 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update
Slug
featured-image-plus
Published
2025-07-22
Title
Featured Image Plus – Quick & Bulk Edit with Unsplash < 1.6.7 - Authenticated (Admin+) Server-Side Request Forgery
Slug
featured-image-pro
Published
2023-05-12
Title
Featured Image Pro Post Grid < 5.15 - Reflected XSS