Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-38719 EUVD-2024-37570GHSA-hcr3-r7j5-ccv9

WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Creative Motion Auto Featured Image (Auto Post Thumbnail) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through 4.1.2.

Affected products

VendorProductAffectedFixed
Creative Motion Auto Featured Image (Auto Post Thumbnail) ≤ 4.1.2 —

References