CVE-2026-123476 | fifu.app Featured Image from URL Plugin up to 6.1.4 on WordPress cross site scripting

November 9, 2026 Yanac

A vulnerability has been found in fifu.app Featured Image from URL Plugin up to 6.1.4 on WordPress and classified as problematic. This issue affects some unknown processing of the component Featured Image from URL. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-123476. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More