CVE-2025-7400 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

EUVD-2021-11844

Malware in sbrugna...

WordPress plugin Featured Image from URL 跨站脚本漏洞

WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...

PT-2025-40970

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions prior to 5.2.8 Description The software is susceptible to Stored Cross-Site Scripting through the Featured Image custom fields of a post. Insufficient input sanitization and output...

WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Featured Image from URL versions = 5.2.7...

EUVD-2025-13781

Malicious code in bioql PyPI...

EUVD-2024-31345

Malicious code in bioql PyPI...

EUVD-2025-3841

Malicious code in bioql PyPI...

EUVD-2025-31212

Malicious code in bioql PyPI...

EUVD-2025-16472

Malicious code in bioql PyPI...

EUVD-2025-26958

Malicious code in bioql PyPI...

EUVD-2023-34222

Malicious code in bioql PyPI...

EUVD-2025-31214

Malicious code in bioql PyPI...

EUVD-2024-42899

Malicious code in bioql PyPI...

EUVD-2024-36725

Malicious code in bioql PyPI...

EUVD-2024-47915

Malicious code in bioql PyPI...

EUVD-2025-7870

Malicious code in bioql PyPI...

EUVD-2025-5742

Malicious code in bioql PyPI...

CVE-2025-10036

The Featured Image from URL FIFU plugin for WordPress is vulnerable to SQL Injection via the getallurls function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-10178

The CM Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cmbdfeaturedimage' shortcode in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...