801 matches found
WordPress Featured Image from URL plugin cross-site scripting vulnerability
WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...
PT-2025-43813
Name of the Vulnerable Software and Affected Versions Johnny Post List Featured Image versions prior to 0.6.0 Description Insufficient input sanitization and output escaping in the Post List Featured Image plugin for WordPress allow authenticated attackers with contributor-level access and above ...
EUVD-2025-32698
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-7400
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-7400 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-7400
CVE-2025-7400 – Featured Image from URL (FIFU) for WordPress is a Stored Cross-Site Scripting flaw in all versions up to 5.2.7, exploitable by an authenticated attacker with Contributor-level access or higher via the post’s Featured Image custom fields. Root cause: insufficient input sanitization...
EUVD-2014-4094
Malware in sbrugna...
EUVD-2020-2594
Malware in sbrugna...
EUVD-2021-11844
Malware in sbrugna...
EUVD-2020-2698
Malware in sbrugna...
CVE-2025-7400: Improper Neutralization of Input During Web Page Generation
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
PT-2025-40970
Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions prior to 5.2.8 Description The software is susceptible to Stored Cross-Site Scripting through the Featured Image custom fields of a post. Insufficient input sanitization and output...
WordPress plugin: Featured Image from URL – Cross-site Scripting Vulnerability
WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...
WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Featured Image from URL versions = 5.2.7...
EUVD-2024-36725
Malicious code in bioql PyPI...
EUVD-2024-31345
Malicious code in bioql PyPI...
EUVD-2025-31267
Malicious code in bioql PyPI...
EUVD-2025-5742
Malicious code in bioql PyPI...