Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-61970 EUVD-2026-43439GHSA-fvq6-mx7c-4433

WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.

Affected products

VendorProductAffectedFixed
Themeisle Auto Featured Image (Auto Post Thumbnail) ≤ 5.0.4 —

References