Featured Image with URL

Featured Image with URL has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Featured Image with URL has a vendor fix available, so running the current release closes it.

All of these findings were reported by Artus KG. Featured Image with URL is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Featured Image with URL vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-86780

Featured Image with URL < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Featured Image with URL banner
Latestv1.0.7

Featured Image with URL

Harikrut Technolab

Author

Harikrut Technolab

4.9(9)
98/100
Last Updated
2026-08-20 (27d ago)
Active Installs
2,000+
Downloads
17,706
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2024-01-22 (3y ago)

Featured Image with URL : Featured Image with URL allows to use an external URL Images as Featured Image for your post, page & custom post types like WooCommerce Product. Includes support for Product Gallery (WooCommerce). So, using this plugin you can easily set featured image from url. Features: Set Featured image by URL for all post types including custom post types. WooCommerce Product Gallery by URLs. Image from URL for WooCommerce Product variation. Display Resized Images as per image sizes like “thumbnail”, “medium” or any custom-size Lightweight & Easy to use Credits: This plugin based on the initial fork of Featured Image by URL plugin. Thanks to the plugin author for the awesome work. Contributing You can contribute to development of the plugin on Github. If you have found a bug/issue or have a feature request, then create issue on Github. Want to add a new language to Featured Image with URL? Swell! You can contribute via translate.wordpress.org. 1.0.7 – 2026-08-20 Changed: Bump WordPress “tested up to” version 7.1 1.0.6 – 2026-07-14 IMPROVEMENTS Enhanced XSS Protection 1.0.5 – 2026-06-22 Changed: Bump WordPress “tested up to” version 7.0 1.0.4 – 2024-12-06 Changed: Bump WordPress “tested up to” version 6.9 Dev: Add PHPCS and Plugin Check GitHub action 1.0.3 – 2024-12-09 Changed: Bump WordPress “tested up to” version 6.7 1.0.2 – 2024-08-25 Added: Update plugin assets GitHub action workflow. Changed: Bump WordPress “tested up to” version 6.6 Changed: Bump WooCommerce “tested up to” version 9.2 1.0.1 Added: Backward compatibility for the “Featured Image by URL” plugin. 1.0.0 Initial Version.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C