fifu.app

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

fifu.app records in CISA KEV

No fifu.app vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-69958 CVE-2026-96671 · GHSA-926h-pfq9-mqvv

Cross-site request forgery in Featured Image from URL plugin

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0013 Published 2026-10-09 No fix listed CWE-352

TI-2024-24791 CVE-2024-37276 · GHSA-2g9g-vv6r-x6cj

WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00359 Published 2024-11-01 No fix listed CWE-862

TI-2026-51460 CVE-2026-73340 · GHSA-58qw-6jw4-mwvh

WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-13 No fix listed CWE-79

TI-2024-25020 CVE-2024-37516 · GHSA-c4rv-v85f-q2wx

WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability

LOW 28

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00418 Published 2024-11-01 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0