CVE-2024-33629 WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerability

🗓️ 29 Apr 2024 07:43:40Reported by PatchstackType

SSRF vulnerability in WordPress Auto Featured Image (Auto Post Thumbnail) plugin

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin Auto Featured Image (Auto Post Thumbnail) 代码问题漏洞	29 Apr 202400:00	–	cnnvd
CVE	CVE-2024-33629	29 Apr 202407:43	–	cve
EUVD	EUVD-2024-31345	3 Oct 202520:07	–	euvd
NVD	CVE-2024-33629	29 Apr 202408:15	–	nvd
Patchstack	WordPress Auto Featured Image (Auto Post Thumbnail) Plugin <= 4.1.3 is vulnerable to Server Side Request Forgery (SSRF)	25 Apr 202400:00	–	patchstack
Patchstack	WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.1.3 - Server Side Request Forgery (SSRF) vulnerability	25 Apr 202415:17	–	patchstack
Positive Technologies	PT-2024-25388 · Unknown · Creative Motion Auto Featured Image	29 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-33629	23 May 202507:58	–	redhatcve
Vulnrichment	CVE-2024-33629 WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerability	29 Apr 202407:43	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)	2 May 202414:49	–	wordfence

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "auto-post-thumbnail",
    "product": "Auto Featured Image (Auto Post Thumbnail)",
    "vendor": "Creative Motion",
    "versions": [
      {
        "lessThanOrEqual": "4.0.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/auto-post-thumbnail/wordpress-auto-featured-image-auto-post-thumbnail-plugin-4-0-0-server-side-request-forgery-ssrf-vulnerability

28 Apr 2026 16:09Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.4

EPSS0.00275

CWE-918