Skip to content
Marceljm vulnerabilities
Newest
-
marceljm featured image from url (fifu), unknown featured image from url (fifu) premium +1 more
Featured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRF
CVE-2026-101147
8.8 High
-
marceljm featured image from url (fifu)
Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
CVE-2025-13393
4.3 Medium
-
marceljm featured image from url (fifu)
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
CVE-2025-7400
6.4 Medium
-
marceljm featured image from url (fifu)
Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
CVE-2025-9985
EPSS 13.3%
5.3 Medium
-
marceljm featured image from url (fifu)
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
CVE-2025-10036
4.9 Medium
-
marceljm featured image from url (fifu)
Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure
CVE-2025-9984
5.3 Medium
-
marceljm featured image from url (fifu)
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
CVE-2025-10037
4.9 Medium
-
fifu featured image from url, marceljm featured image from url (fifu) +1 more
Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
CVE-2024-1496
6.4 Medium
-
fifu featured image from url, marceljm featured image from url (fifu) +1 more
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text
CVE-2023-6561
6.4 Medium
-
fifu featured image from url, marceljm featured image from url (fifu) +1 more
Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
CVE-2022-2278
4.8 Medium
-
fifu featured image from url, marceljm featured image from url (fifu) +1 more
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
CVE-2022-2241
6.1 Medium