Advisories · Technology

fifu.app Featured Image from URL.

Every CVE that names fifu.app Featured Image from URL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96671 CVE record

CVSS 8.8 High

WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
- fifu.app Featured Image from URL
- Cross-site request forgery (CSRF)
Not analysed yet 9 Oct 2026
CVE-2026-73340 CVE record

CVSS 6.5 Medium

WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
- fifu.app Featured Image from URL
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2026
CVE-2024-37276 CVE record

CVSS 5.3 Medium

WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability
- fifu.app Featured Image from URL
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-37516 CVE record

CVSS 6.3 Medium

WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability
- fifu.app Featured Image from URL
- Broken access control
Not analysed yet 1 Nov 2024