Featured Image with URL
Featured Image with URL has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Featured Image with URL has a vendor fix available, so running the current release closes it.
All of these findings were reported by Artus KG. Featured Image with URL is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-86780Featured Image with URL < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Featured Image with URL
Author
Harikrut Technolab
Featured Image with URL : Featured Image with URL allows to use an external URL Images as Featured Image for your post, page & custom post types like WooCommerce Product. Includes support for Product Gallery (WooCommerce). So, using this plugin you can easily set featured image from url. Features: Set Featured image by URL for all post types including custom post types. WooCommerce Product Gallery by URLs. Image from URL for WooCommerce Product variation. Display Resized Images as per image sizes like “thumbnail”, “medium” or any custom-size Lightweight & Easy to use Credits: This plugin based on the initial fork of Featured Image by URL plugin. Thanks to the plugin author for the awesome work. Contributing You can contribute to development of the plugin on Github. If you have found a bug/issue or have a feature request, then create issue on Github. Want to add a new language to Featured Image with URL? Swell! You can contribute via translate.wordpress.org. 1.0.7 – 2026-08-20 Changed: Bump WordPress “tested up to” version 7.1 1.0.6 – 2026-07-14 IMPROVEMENTS Enhanced XSS Protection 1.0.5 – 2026-06-22 Changed: Bump WordPress “tested up to” version 7.0 1.0.4 – 2024-12-06 Changed: Bump WordPress “tested up to” version 6.9 Dev: Add PHPCS and Plugin Check GitHub action 1.0.3 – 2024-12-09 Changed: Bump WordPress “tested up to” version 6.7 1.0.2 – 2024-08-25 Added: Update plugin assets GitHub action workflow. Changed: Bump WordPress “tested up to” version 6.6 Changed: Bump WooCommerce “tested up to” version 9.2 1.0.1 Added: Backward compatibility for the “Featured Image by URL” plugin. 1.0.0 Initial Version.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C