WordPress security by component

Featured Image via URL

Plugin description

Featured Image via URL is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 05, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: featured-image-via-url

Latest vulnerability

CVE-2025-12153: Featured Image via URL: Dangerous file upload

Featured Image via URL is affected by dangerous file upload. Exploitation requires at least contributor-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedDec 05, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 05, 2025	CVE-2025-12153 Featured Image via URL: Dangerous file upload Featured Image via URL is affected by dangerous file upload. Exploitation requires at least contributor-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.8 NVDPending