Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.1%	CVE-2026-96671Featured Image from URL · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.1%2026-10-09CVE Database V5CVE-2026-96671 CVE-2026-96671 is a Cross-Site Request Forgery (CSRF) vulnerability in the Featured Image from URL plugin for fifu.app. It affects versions from initial releases up to 6.0.7. The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. The CVSS score is 8.8, indicating a high severity with potential for complete confidentiality, integrity, and availability impact. No patch or vendor advisory details are provided in the input data. EPSS 0.1%Vulnerability fifu.app	CVE Database V5	2026-10-09
Medium	6.5	EPSS 0.2%	CVE-2026-73340Featured Image from URL · Cross-site Scripting Medium6.5EPSS 0.2%2026-08-13CVE Database V5CVE-2026-73340 Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions. EPSS 0.2%Vulnerability fifu.app #cwe-79 #ghsa-58qw-6jw4-mwvh	CVE Database V5	2026-08-13
Medium	5.3	EPSS 0.4%	CVE-2024-37276Featured Image from URL · Missing Authorization Medium5.3EPSS 0.4%2024-11-01CVE Database V5CVE-2024-37276 Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1. EPSS 0.4%Vulnerability fifu.app #cwe-862	CVE Database V5	2024-11-01
Medium	6.3	EPSS 0.4%	CVE-2024-37516Featured Image from URL · Missing Authorization Medium6.3EPSS 0.4%2024-11-01CVE Database V5CVE-2024-37516 Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.2. EPSS 0.4%Vulnerability fifu.app #cwe-862	CVE Database V5	2024-11-01

Showing 1–4 of 4 results