All 7 CVE vulnerabilities found in Auto Featured Image (Auto Post Thumbnail), with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-61970 | WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability CWE-918 | 4.9 | Medium | 2026-07-13 |
| CVE-2025-13794 | Auto Featured Image <= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification CWE-862 | 4.3 | Medium | 2025-12-16 |
| CVE-2024-38719 | WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2024-11-01 |
| CVE-2023-7073 | Auto Featured Image (Auto Post Thumbnail) <= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery CWE-918 | 6.4 | Medium | 2024-05-31 |
| CVE-2024-33629 | WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerability CWE-918 | 4.4 | Medium | 2024-04-29 |
| CVE-2023-0477 | Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload | 8.8 | - | 2023-03-13 |
| CVE-2021-24932 | Auto Featured Image < 3.9.3 - Reflected Cross-Site Scripting CWE-79 | 6.1 | - | 2021-12-13 |
All 7 known CVE vulnerabilities affecting Auto Featured Image (Auto Post Thumbnail) with full Chinese analysis, references, and POCs where available.