4.9
Medium
CVE-2026-61970 Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail)…
Description
Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Auto Featured Image (Auto Post Thumbnail) 5.0 | earliest → 5.0.4 | No fix stated |
Other CVEs of Auto Featured Image (Auto Post Thumbnail)
The 4 CVEs of Auto Featured Image (Auto Post Thumbnail) →
CVE-2025-13794
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to unauthorized modification of data…
4.3
Medium
CVE-2025-10145
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
7.7
High
CVE-2023-7073
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
6.4
Medium