CVE-2025-10145 | Auto Featured Image Plugin up to 4.1.7 on WordPress upload_to_library server-side request forgery

October 28, 2025 Yanac

A vulnerability categorized as critical has been discovered in Auto Featured Image Plugin up to 4.1.7 on WordPress. This vulnerability affects the function upload_to_library. Such manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2025-10145. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More