Auto Featured Image (Auto Post Thumbnail)
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:auto_featured_image_(auto_post_thumbnail):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Auto Featured Image (Auto Post Thumbnail) (d5a5aa7c-bbc1-5efc-a2e9-8921a1f83e02) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0477 |
vulnerable | 2026-06-08 05:52:05.152348 |
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to upload arbitrary files, such as PHP files. This is caused by incorrect file extension validation.
Published: 2023-03-13T16:03:28.116Z
Updated: 2025-02-27T20:19:02.028Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24932 |
vulnerable | 2026-06-08 05:30:39.643424 |
Auto Featured Image < 3.9.3 - Reflected Cross-Site Scripting
The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.3 does not sanitise and escape the post_id parameter before outputting back in an admin page within a JS block, leading to a Reflected Cross-Site Scripting issue.
Published: 2021-12-13T10:41:22.000Z
Updated: 2024-08-03T19:49:12.678Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.