Advisories · Technology
Themeisle Auto Featured Image (Auto Post Thumbnail).
Every CVE that names Themeisle Auto Featured Image (Auto Post Thumbnail) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability
- Themeisle Auto Featured Image (Auto Post Thumbnail)
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Auto Featured Image <= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification
- themeisle Auto Featured Image (Auto Post Thumbnail)
- Broken access control
- CVSS 6.4 Medium
Auto Featured Image (Auto Post Thumbnail) <= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery
- themeisle Auto Featured Image (Auto Post Thumbnail)
- Server-side request forgery (SSRF)