TI-2025-11143 CVE-2025-12153 · GHSA-8h55-3657-fgg7
Featured Image via URL <= 0.1 - Authenticated (Contributor+) Arbitrary FIle Upload
Priority MEDIUM 41
The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all versions up to, and including, 0.1.