Auto Featured Image from Title
Auto Featured Image from Title has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Auto Featured Image from Title has a vendor fix available, so running the current release closes it.
All of these findings were reported by vgo0. Auto Featured Image from Title is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-8786Auto Featured Image from Title <= 2.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Auto Featured Image from Title
Author
Chris Huff
This plugin makes the process of publishing content more simple. Write your blog post. Spend hours searching stock photography websites online for the perfect image to go with your blog post. Done! If you don’t set a featured image manually, this plugin will automatically generate an image from the post title, excerpt, or content of a new or updated post or page and set it as the featured image. The image will then be included in your theme wherever the featured image for the post or page is called for. Upgrade to the PRO version for more features and control!! It’s good to have an image in every post and page that you create. It helps for things like search engine optimization, social sharing, and just the attractiveness of your blog. But sometimes it can take longer to find a good image for a particular blog post than to write the post itself. This plugin simplifies the process of publishing content. It will automatically create a customized image for each post or page that you create. You can select a background image to match the look and feel of your blog, and the plugin will automatically write the title, excerpt, or first 55 characters of the content of a new or updated post or page on top of this background image to create a unique image for each post. By popular demand, the plugin now has an option to simply set the featured image from the first attached image in a post, without generating a new image.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C