Skip to content
Noroxi

fifu records

5 published records for vendor fifu.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2022-2241
    24Monitor

    Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF

    MediumCVSS 6.1No exploitEPSS 1%

    fifu · featured image from urlAug 1, 2022

  • CVE-2023-6561
    21Monitor

    Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text

    MediumCVSS 5.4No exploitEPSS 0%

    fifu · featured image from urlJan 11, 2024

  • CVE-2024-1496
    21Monitor

    Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url

    MediumCVSS 5.4No exploitEPSS 0%

    fifu · featured image from urlFeb 28, 2024

  • CVE-2024-37276
    21Monitor

    WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    fifu.app · featured image from urlNov 1, 2024

  • CVE-2022-2278
    19Monitor

    Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    fifu · featured image from urlAug 1, 2022