Skip to content
OpenAdvisories

Product · Mervin Praison

Featured Image

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57431

    WordPress Featured Image plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability

    Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.

    Mervin Praison Featured Image
  • Medium 4.4
    CVE-2025-12019

    Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, w…

    Mervin Praison Featured Image Web / CMS