CVE-2025-13393 | Featured Image from URL FIFU Plugin up to 5.3.1 on WordPress getimagesize fifu_input_url server-side request forgery

January 10, 2026 Yanac

A vulnerability identified as critical has been detected in Featured Image from URL FIFU Plugin up to 5.3.1 on WordPress. Impacted is the function getimagesize. The manipulation of the argument fifu_input_url leads to server-side request forgery.

This vulnerability is listed as CVE-2025-13393. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More