https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 00:22:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288889 EUVD-2026-288889 https://cve.radiocsirt.org/vuln/euvd-2026-288889 https://cve.radiocsirt.org/vuln/fkie_cve-2023-7073 <p>The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.1.7 via the upload_to_library AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> <p>The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.1.7 via the upload_to_library AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-7073 https://cve.radiocsirt.org/vuln/ghsa-c8qj-jvph-xj8w <p>The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.0 via the upload_to_library AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> <p>The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.0 via the upload_to_library AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> https://cve.radiocsirt.org/vuln/ghsa-c8qj-jvph-xj8w https://cve.radiocsirt.org/vuln/gsd-2023-7073 gsd-2023-7073 https://cve.radiocsirt.org/vuln/gsd-2023-7073