Auto Featured Image Plugin up to 4.1.7 on WordPress upload_to_library server-side request forgery 🚫 [False Positive]

Noticeinfo

⚠️ It seems this issue is a false-positive. Please confirm the sources provided and consider disregarding this entry.

Productinfo

Type

• WordPress Plugin

Name

• Auto Featured Image Plugin

Version

• 4.1.0
• 4.1.1
• 4.1.2
• 4.1.3
• 4.1.4
• 4.1.5
• 4.1.6
• 4.1.7

Timelineinfo

10/28/2025 Advisory disclosed
10/28/2025 +0 days VulDB entry created
01/16/2026 +80 days VulDB entry last update

Sourcesinfo

Advisory: wordfence.com
False Positive: Yes

CVE: CVE-2025-10145 (🔒)
GCVE (CVE): GCVE-0-2025-10145
GCVE (VulDB): GCVE-100-330213
EUVD: 🔒

Entryinfo

Created: 10/28/2025 01:10
Updated: 01/16/2026 16:14
Changes: 10/28/2025 01:10 (51), 10/28/2025 07:28 (1), 10/28/2025 11:34 (12), 01/16/2026 16:14 (3)
Complete: 🔍
Cache ID: 216::103

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion

Do you know our Splunk app?

Download it now for free!