7.7
Élevée
CVE-2025-10145 The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
Description
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.1.7 via the upload_to_library function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. On Cloud instances, this issue allows for metadata retrieval.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Auto Featured Image (Auto Post Thumbnail) 4.1 | premières → 4.1.7 | Pas de correctif indiqué |
Autres CVE de Auto Featured Image (Auto Post Thumbnail)
Les 4 CVE de Auto Featured Image (Auto Post Thumbnail) →
CVE-2026-61970
Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail)…
4.9
Moyenne
CVE-2025-13794
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to unauthorized modification of data…
4.3
Moyenne
CVE-2023-7073
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
6.4
Moyenne