Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

fifu.app vulnerabilities

5 published CVEs name fifu.app among the affected products.

Newest CVEs

  • CVE-2026-123476

    WordPress Featured Image from URL plugin <= 6.1.4 - Cross Site Scripting (XSS) vulnerability

    fifu.app · Featured Image from URL

    High7.1
  • CVE-2026-96671

    WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability

    fifu.app · Featured Image from URL

    High8.8
  • CVE-2026-73340

    WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

    fifu.app · Featured Image from URL

    Medium6.5
  • CVE-2024-37276

    WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

    fifu.app · Featured Image from URL

    Medium5.3
  • CVE-2024-37516

    WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability

    fifu.app · Featured Image from URL

    Medium6.3