WordPress plugin Featured Image from URL SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin Featured Image from URL SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

PT-2025-39474

Name of the Vulnerable Software and Affected Versions CM Business Directory plugin for WordPress versions up to and including 1.5.2 Description The CM Business Directory plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'cmbd featured image' shortcode. This is due to...

WordPress plugin Featured Image from URL 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-39497

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions through 5.2.7 Description The software is susceptible to a SQL Injection issue due to inadequate escaping of user-supplied parameters and insufficient preparation of existing SQL queri...

WordPress plugin Post Featured Video 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-39498

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions through 5.2.7 Description The plugin is susceptible to unauthorized data access because of a missing capability check within the fifu api debug posts function. This allows...

PT-2025-39580

Name of the Vulnerable Software and Affected Versions Galaxy Weblinks Post Featured Video versions through 1.7 Description A Cross-Site Request Forgery issue exists in Galaxy Weblinks Post Featured Video. This allows for Cross Site Request Forgery attacks. Recommendations At the moment, there is ...

WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by ifoundbug in WordPress Plugin Featured Image from URL versions = 5.2.7...

WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure vulnerability

Missing Authorization to Password Protected Post Disclosure vulnerability discovered by ifoundbug in WordPress Plugin Featured Image from URL versions = 5.2.7...

CVE-2025-58655

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mat Category Featured Images category-featured-images allows Stored XSS.This issue affects Category Featured Images: from n/a through = 1.1.8...

CVE-2025-57920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CK MacLeod Category Featured Images Extended category-featured-images-extended allows Stored XSS.This issue affects Category Featured Images Extended: from n/a through = 1.52...

WordPress Category Featured Images Extended Plugin <= 1.52 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Category Featured Images Extended versions = 1.52...

CVE-2025-58655

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mat Category Featured Images category-featured-images allows Stored XSS.This issue affects Category Featured Images: from n/a through = 1.1.8...

CVE-2025-57920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CK MacLeod Category Featured Images Extended category-featured-images-extended allows Stored XSS.This issue affects Category Featured Images Extended: from n/a through = 1.52...

WordPress Category Featured Images Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Category Featured Images versions = 1.1.8...

CVE-2025-57920 WordPress Category Featured Images Extended Plugin <= 1.52 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CK MacLeod Category Featured Images Extended category-featured-images-extended allows Stored XSS.This issue affects Category Featured Images Extended: from n/a through = 1.52...

CVE-2025-57920 WordPress Category Featured Images Extended Plugin <= 1.52 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CK MacLeod Category Featured Images Extended category-featured-images-extended allows Stored XSS.This issue affects Category Featured Images Extended: from n/a through = 1.52...

CVE-2025-57920

CVE-2025-57920 affects Category Featured Images Extended (WordPress plugin). It is a Stored XSS vulnerability caused by improper neutralization of input during web page generation, impacting versions up to and including 1.52. The connected Wordfence vulnerability listing indicates the issue as Ca...

CVE-2025-58655

CVE-2025-58655 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Category Featured Images . The issue is triggered during web page generation due to improper neutralization of input, affecting versions 0 through 1.1.8 . The CVSS vector (AV:N/AC:L/PR:H/UI:R/S:C/C:...