Advisories · Technology
marceljm Featured Image from URL (FIFU).
Every CVE that names marceljm Featured Image from URL (FIFU) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
- marceljm Featured Image from URL (FIFU)
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
- marceljm Featured Image from URL (FIFU)
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
- marceljm Featured Image from URL (FIFU)
- SQL injection
- CVSS 5.3 Medium
Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
- marceljm Featured Image from URL (FIFU)
- Information disclosure
- CVSS 5.3 Medium
Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure
- marceljm Featured Image from URL (FIFU)
- Broken access control
- CVSS 4.9 Medium
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
- marceljm Featured Image from URL (FIFU)
- SQL injection
- CVSS 6.4 Medium
Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
- marceljm Featured Image from URL (FIFU)
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text
- marceljm Featured Image from URL (FIFU)
- Cross-site scripting (XSS)