fifu

Security Risk Profile

/100

high

Security Risk Score

Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 1, 2022 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

6.5

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

77/100

high

🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

CSRF

Most Affected Products

1. FIFU Featured Image From Url Wordpress4

2. FIFU Featured Image from URL (FIFU) Free1

3. FIFU Featured Image from URL (FIFU) Premium1

4. WordPress Featured Image from URL (FIFU)1

Recent Vulnerabilities

See more →

CVE-2026-101147

CVSS 8.8high

Featured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRF

Oct 1, 2026🔧 No Patch

CVE-2024-1496

CVSS 6.4medium

Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url

Feb 20, 2024

CVE-2023-6561

CVSS 6.4EPSS 0%medium

Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text

Jan 11, 2024

CVE-2022-2278

CVSS 4.8medium

Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting

Aug 1, 2022🔧 No Patch

CVE-2022-2241

CVSS 6.1medium

Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF