Generate Images (AI) – Magic Post Thumbnail

Generate Images (AI) – Magic Post Thumbnail has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 6 are fixed as of October 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Missing Authorization.

Every one of the 6 issues recorded for Generate Images (AI) – Magic Post Thumbnail has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Generate Images (AI) – Magic Post Thumbnail vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-29171

Magic Post Thumbnail <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records


2024-08-26 00:00	Magic Post Thumbnail <= 5.2.9 - Reflected Cross-Site Scripting Generate Images (AI) <= 5.2.9	`CVE-2024-43921`	6.1 Medium	Le Ngoc Anh	Yes
2024-07-22 00:00	Generate Images – Magic Post Thumbnail <= 5.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting Generate Images (AI) <= 5.2.7	`CVE-2024-6724`	4.4 Medium	Kieran Burge	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Generate Images (AI) 2.4.3 – 4.1.12	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2023-04-03 00:00	Magic Post Thumbnail <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting Generate Images (AI) <= 4.1.10	`CVE-2023-29171`	7.2 High	minhtuanact	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Generate Images (AI) < 3.3.11	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes
2021-07-05 00:00	Magic Post Thumbnail <= 3.3.6 - Reflected Cross-Site Scripting Generate Images (AI) <= 3.3.6	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–6 of 6 reports