Log in Start free

marceljm

Products

ProductCVEsExploitedLatest
Featured Image from URL (FIFU)8–Jan 10, 2026

Exploited and recent CVEs

  • CVE-2025-13393 Medium 4.3 Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url' 0.3%
  • CVE-2025-7400 Medium 6.4 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields 0.2%
  • CVE-2025-10036 Medium 4.9 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection 0.3%
  • CVE-2025-9985 Medium 5.3 Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File 13.3%
  • CVE-2025-9984 Medium 5.3 Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure 0.3%
  • CVE-2025-10037 Medium 4.9 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection 0.3%
  • CVE-2024-1496 Medium 6.4 Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url 0.4%
  • CVE-2023-6561 Medium 6.4 Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text 0.4%