Bulk Featured Image
Bulk Featured Image has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
None of the 3 issues recorded for Bulk Featured Image have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
3 independent researchers contributed these findings, one record each. Bulk Featured Image is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-58819Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Read the full analysisVulnerability Records

Bulk Featured Image
Author
CreedAlly
Have hundreds of products or blog posts on your websites and having trouble setting up/changing featured images for them? We identified the pain and developed a plugin that lets you do this with just a single click. During one of our meetings, one of our clients mentioned that they are having trouble with featured images for their website or blog. Whenever images need to be changed or removed. It appears simple for a single post or product, but doing it manually for 100 images in different post thumbnails takes a huge amount of time. And they were having more than 10000+ blog posts on their site and changing images of all of them was becoming exhausting tasks for them. Which late got converted into single-day tasks as they start using our easy-to-use and simple Bulk Featured Image plugin. Easily update or set featured image on the post, page and product. Features Global settings for choose PostType. Global settings for allow default featured image. Allows post, page and product to set featured image. If you want to allow more Post Type then use filter. Set featured image in Bulk. Add/update featured image from posts listing page. Remove featured image from posts listing and plugin setting area . Links Website Documentation Support PRO Avoid the time-consuming lengthy task of setting up featured images and use our Bulk Featured Image extension to save energy, time, and effort for your team. Allow to set multiple featured image for Post, page, product and custom post types. Allow import featured images using CSV file for all post types. Easy to add data in CSV with PrePopulated CSV Sample data of Products and Post Types. Enable/Disable setting for default thumbnails images for post types. Displaying all selected custom post types in submenu under the post types tab. Settings for per page limit. Settings for Allow post types. Custom settings page for managing plugin. Upload featured image using url from posts listing and plugin setting area. Import multiple product gallery image using CSV file Import multiple product gallery image using listing interface. Upload post content image after paragraph using CSV with add “|” separator and support only Classic Editor, Gutenberg, Elemantor and Divi Builder Allow to remove multiple featured image for post, page, product and custom post types using listings interface. Allow to remove multiple product gallery image using listing interface. Allow to remove featured images using csv file for all post types. Allow to remove product gallery images using csv file. Added option to remove default featured image in post, page, product and custom post types. Upgrade to Pro
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C