WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
featured-image-from-url
Published
2019-12-24
Title
Featured Image from URL <= 2.7.7 - Missing Access Controls on REST routes
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
featured-image-from-url
Published
2023-12-14
Title
Featured Image from URL (FIFU) < 4.5.4 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2024-02-19
Title
Featured Image from URL (FIFU) < 4.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
Slug
featured-image-from-url
Published
2024-06-28
Title
Featured Image from URL < 4.8.2 - Missing Authorization
Slug
featured-image-from-url
Published
2024-07-05
Title
Featured Image from URL < 4.8.3 - Missing Authorization
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Missing Authorization to Password Protected Post Disclosure
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Unauthenticated Information Exposure via Log File
Slug
featured-image-from-url
Published
2025-10-06
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
Slug
featured-image-from-url
Published
2026-01-09
Title
Featured Image from URL (FIFU) < 5.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
Slug
featured-image-generator
Published
2024-07-09
Title
Featured Image Generator < 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Images Upload
Slug
featured-image-generator
Published
2025-12-31
Title
Featured Image Generator <= 1.3.3 - Missing Authorization
Slug
featured-image-plus
Published
2025-05-29
Title
Featured Image Plus < 1.6.6 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update
Slug
featured-image-plus
Published
2025-07-22
Title
Featured Image Plus – Quick & Bulk Edit with Unsplash < 1.6.7 - Authenticated (Admin+) Server-Side Request Forgery
Slug
featured-image-pro
Published
2023-05-12
Title
Featured Image Pro Post Grid < 5.15 - Reflected XSS
Slug
featured-image-toolkit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
featured-image-toolkit
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
featured-image-toolkit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
featured-image-via-url
Published
2025-12-04
Title
Featured Image via URL <= 0.1 - Authenticated (Contributor+) Arbitrary FIle Upload
Slug
featured-images-for-rss-feeds
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
featured-images-for-rss-feeds
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
featured-page-widget
Published
2025-01-07
Title
Featured Page Widget <= 2.2 - Reflected Cross-Site Scripting