WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
featured-image-from-url
Published
2024-07-05
Title
Featured Image from URL < 4.8.3 - Missing Authorization
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Missing Authorization to Password Protected Post Disclosure
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Unauthenticated Information Exposure via Log File
Slug
featured-image-from-url
Published
2025-10-06
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
Slug
featured-image-generator
Published
2024-07-09
Title
Featured Image Generator < 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Images Upload
Slug
featured-image-generator
Published
2025-12-31
Title
Featured Image Generator <= 1.3.3 - Missing Authorization
Slug
featured-image-plus
Published
2025-05-29
Title
Featured Image Plus < 1.6.6 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update
Slug
featured-image-plus
Published
2025-07-22
Title
Featured Image Plus – Quick & Bulk Edit with Unsplash < 1.6.7 - Authenticated (Admin+) Server-Side Request Forgery
Slug
featured-image-pro
Published
2023-05-12
Title
Featured Image Pro Post Grid < 5.15 - Reflected XSS
Slug
featured-image-toolkit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
featured-image-toolkit
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
featured-image-toolkit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
featured-image-via-url
Published
2025-12-04
Title
Featured Image via URL <= 0.1 - Authenticated (Contributor+) Arbitrary FIle Upload
Slug
featured-images-for-rss-feeds
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
featured-images-for-rss-feeds
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
featured-page-widget
Published
2025-01-07
Title
Featured Page Widget <= 2.2 - Reflected Cross-Site Scripting
Slug
featured-post-creative
Published
2025-11-26
Title
Featured Post Creative < 1.5.6 - Missing Authorization
Slug
featured-post-with-thumbnail
Published
2014-08-01
Title
Featured Post with thumbnail 1.4 - Unspecified timthumb
Slug
featured-posts-grid
Published
2025-03-11
Title
Featured Posts Grid <= 1.7 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
featured-posts-scroll
Published
2024-11-01
Title
Featured Posts Scroll <= 1.25 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
featured-posts-with-multiple-custom-groups-fpmcg
Published
2024-10-09
Title
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery
Slug
featured-posts-with-multiple-custom-groups-fpmcg
Published
2024-10-09
Title
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Reflected Cross-Site Scripting
Slug
featured-product-by-category-name
Published
2024-11-08
Title
Featured product by category name <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting