CVE Database /
CVE-2024-37276
CVE · Medium
CVE-2024-37276 — Featured Image from URL (FIFU) [featured-image-from-url] < 4.8.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-37276
|
Featured Image from URL (FIFU) [featured-image-from-url] < 4.8.2 |
Missing Authorization |
Medium
5.3
|
< 4.8.2
|
4.8.2 |
2024-06-28 |
—
|
CVE-2024-37276
The Featured Image from URL plugin for WordPress contains a vulnerability in versions through 4.8.1 where the fifu_save_sizes_api() function lacks proper permission validation. This oversight allows unauthenticated users to modify size configuration settings without authorization. The vulnerability was addressed in version 4.8.2.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings