Skip to contentMarceljm Featured Image From Url (fifu) vulnerabilities
- marceljm featured image from url (fifu), unknown featured image from url (fifu) premium +1 moreFeatured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRFCVE-2026-1011478.8 High
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'CVE-2025-133934.3 Medium
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom FieldsCVE-2025-74006.4 Medium
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log FileCVE-2025-9985EPSS 13.3%5.3 Medium
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL InjectionCVE-2025-100364.9 Medium
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post DisclosureCVE-2025-99845.3 Medium
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL InjectionCVE-2025-100374.9 Medium
- fifu featured image from url, marceljm featured image from url (fifu) +1 moreFeatured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_urlCVE-2024-14966.4 Medium
- fifu featured image from url, marceljm featured image from url (fifu) +1 moreFeatured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt textCVE-2023-65616.4 Medium
- fifu featured image from url, marceljm featured image from url (fifu) +1 moreFeatured Image from URL < 4.0.1 - Admin+ Stored Cross-Site ScriptingCVE-2022-22784.8 Medium
- fifu featured image from url, marceljm featured image from url (fifu) +1 moreFeatured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRFCVE-2022-22416.1 Medium