Featured Image from URL (FIFU) — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Featured Image from URL (FIFU), with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-101147	Featured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRF	-	-	2026-10-01
CVE-2025-13393	Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url' CWE-918	4.3	Medium	2026-01-10
CVE-2025-7400	Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields CWE-79	6.4	Medium	2025-10-07
CVE-2025-10036	Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection CWE-89	4.9	Medium	2025-09-26
CVE-2025-9984	Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure CWE-862	5.3	Medium	2025-09-26
CVE-2025-9985	Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File CWE-532	5.3	Medium	2025-09-26
CVE-2025-10037	Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection CWE-89	4.9	Medium	2025-09-26
CVE-2024-1496	Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url CWE-79	6.4	Medium	2024-02-20
CVE-2023-6561	Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text CWE-79	6.4	Medium	2024-01-11
CVE-2022-2278	Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting CWE-79	4.8	-	2022-08-01
CVE-2022-2241	Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF	6.1	-	2022-08-01

All 11 known CVE vulnerabilities affecting Featured Image from URL (FIFU) with full Chinese analysis, references, and POCs where available.