Featured Image from URL (FIFU) vulnerabilities
We track 1 vulnerability in Featured Image from URL (FIFU) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Featured Image from URL (FIFU) vulnerabilities
- 8.8 High severity
Featured Image from URL (FIFU): Cross-Site Request Forgery
The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugin before 8.2.8 do not correctly enforce the REST API nonce, disabling the check for the whole request when a crafted URL is used, which coul