Known vulnerabilities in the Featured Image From Url plugin
11 security advisories have been published for the Featured Image From Url plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Featured Image from URL - Cross-Site Scripting (XSS) (CVE-2026-73340) MEDIUM
- Featured Image From Url - Server-Side Request Forgery (SSRF) (CVE-2025-13393) MEDIUM
- Featured Image from URL - Cross-Site Scripting (XSS) (CVE-2025-7400) MEDIUM
- Featured Image From Url - Information Disclosure (CVE-2025-9985) MEDIUM
- Featured Image From Url - Broken Access Control (CVE-2025-9984) MEDIUM
- Featured Image From Url - SQL Injection (CVE-2025-10037) MEDIUM
- Featured Image From Url - SQL Injection (CVE-2025-10036) MEDIUM
- Featured Image From Url - Cross-Site Scripting (XSS) (CVE-2024-1496) MEDIUM
- Featured Image From Url - Cross-Site Scripting (XSS) (CVE-2023-6561) MEDIUM
- Featured Image From Url - Cross-Site Scripting (XSS) (CVE-2022-2278) MEDIUM
- Featured Image from URL - Cross-Site Scripting (XSS) (CVE-2022-2241) MEDIUM