VulnCheck KEV: CVE-2025-9985

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

CVE-2025-9985

creationtimestamp| type| source ---|---|--- 2025-11-05 08:15:15+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-9985.yaml 2025-11-05 22:20:44+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/146 2025-11-06 21:02:29+00:00| seen|...

WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Unauthenticated Information Exposure via Log File vulnerability

Unauthenticated Information Exposure via Log File vulnerability discovered by ifoundbug in WordPress Plugin Featured Image from URL versions = 5.2.7...