CVE Intelligence

Vulnerabilidades do Themeisle Auto Featured Image (Auto Post Thumbnail)

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Themeisle Auto Featured Image (Auto Post Thumbnail): 2 registro(s), com versões afetadas e correções.

CVE-2026-61970 Média · 4.9 CWE-918 13/07/2026
WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.
CVE-2025-13794 Média · 4.3 CWE-862 16/12/2025
Auto Featured Image <= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bulk_action_generate_handler function in all versions up to, and including, 4.2.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete or generate featured images on posts they do not own.