CVE-2026-61970

MEDIUM

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.

StatusDeferred

설명

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.

Score Summary

CVSS Score: 4.9
Version: 3.1
VPI: 49
Why this VPI (explainable, experimental)
VPI breakdown
Impact 49.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 49.00
VPI formula vpi-v1
EPSS: 0.1%
(상위 2.12%)
Attack Vector: Network
High Complexity
Low Privileges
No User Interaction
Scope Changed
Low Confidentiality Impact
Low Integrity Impact
No Availability Impact

Details

Published: 07/13/2026(8 days ago)
Modified: 07/13/2026(7 days ago)
Source: NVD

CWE Weakness Classification

CWE-918
NVD
Secondary

References (1)

NVD
https://patchstack.com/database/Wordpress/Plugin/auto-post-thumbnail/vulnerability/wordpress-auto-featured-image-auto-post-thumbnail-plugin-5-0-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	49.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	49.00