EUVD-2026-1844

🗓️ 10 Jan 2026 13:47:35Reported by EUVDType

FIFU plugin allows server-side forgery up to 5.3.1 via getimagesize in the Elementor widget.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-13393	10 Jan 202617:29	–	circl
CNNVD	WordPress plugin Featured Image from URL 代码问题漏洞	10 Jan 202600:00	–	cnnvd
CVE	CVE-2025-13393	10 Jan 202613:47	–	cve
Cvelist	CVE-2025-13393 Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'	10 Jan 202613:47	–	cvelist
NVD	CVE-2025-13393	10 Jan 202614:15	–	nvd
Patchstack	WordPress Featured Image from URL (FIFU) plugin <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url' vulnerability	2 Feb 202601:12	–	patchstack
Positive Technologies	PT-2026-1702	10 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-13393	13 Jan 202622:52	–	redhatcve
Vulnrichment	CVE-2025-13393 Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'	10 Jan 202613:47	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 5, 2026 to January 11, 2026)	15 Jan 202616:14	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "971c5ddc-f968-36e0-a263-1cc92f8405b2",
        "vendor": {
          "name": "marceljm"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8730f13f-1cad-3187-8986-e67845f406fe",
        "product": {
          "name": "Featured Image from URL (FIFU)"
        },
        "product_version": "* ≤5.3.1"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-13393
plugins	www.plugins.trac.wordpress.org/browser/featured-image-from-url/trunk/elementor/widgets/widget.php
plugins	www.plugins.trac.wordpress.org/browser/featured-image-from-url/trunk/elementor/widgets/widget.php
plugins	www.plugins.trac.wordpress.org/changeset/3428744
research	www.research.cleantalk.org/cve-2025-13393
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b7115070-b84d-4d69-993a-f512b9f9c081
research	www.research.cleantalk.org/cve-2025-13393/
plugins	www.plugins.trac.wordpress.org/changeset/3428744/

10 Jan 2026 13:47Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.3

EPSS0.00039