Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-61970

WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

Description

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Themeisle Auto Featured Image (Auto Post Thumbnail)

Default version status: unaffected

  • 0 to ≤ 5.0.4affected

References