PT-2026-57795 · Themeisle · Auto Featured Image

Ananda Dhakal

·

CVE-2026-61970

·

Published

2026-07-13

·

Updated

2026-07-13

CVSS v3.1

4.9

Medium

VectorAV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Themeisle Auto Featured Image (Auto Post Thumbnail) versions prior to 5.0.5
Description Server-Side Request Forgery (SSRF) occurs in the auto-post-thumbnail component, which allows an attacker to induce the server-side application to make requests to an unintended location.
Recommendations Update Themeisle Auto Featured Image (Auto Post Thumbnail) to version 5.0.5 or later.

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-61970

Affected Products

Auto Featured Image