Featured Image from URL (FIFU) vulnerabilities

1 known vulnerability in Featured Image from URL (FIFU) from Featured Image from URL (FIFU). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Featured Image from URL (FIFU): Cross-Site Request Forgery

  CVE-2026-101147Oct 1, 2026Featured Image from URL (FIFU)

  The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugin before 8.2.8 do not correctly enforce the REST API nonce, disabling the check for the whole request when a crafted URL is used, which coul