Generate Images (AI) – Magic Post Thumbnail

Generate Images (AI) – Magic Post Thumbnail has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 6 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Missing Authorization.

Every one of the 6 issues recorded for Generate Images (AI) – Magic Post Thumbnail has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each. Generate Images (AI) – Magic Post Thumbnail is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all Generate Images (AI) – Magic Post Thumbnail vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-29171

Magic Post Thumbnail <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records
Generate Images (AI) – Magic Post Thumbnail banner
Latestv7.0.1

Generate Images (AI) – Magic Post Thumbnail

Alexandre Gaboriau

Author

Alexandre Gaboriau

4.3(25)
86/100
Last Updated
2026-08-24 (20d ago)
Active Installs
5,000+
Downloads
487,048
Requires WP
6.0+
Requires PHP
7.3+
Tested up to
WP 7.1
Created
2012-05-16 (15y ago)

Magic Post Thumbnail generates images for your posts — as featured images or inside the content — from image sources and AI models. Free searches can use the post title or text analysis. Pro adds tags, categories, custom fields, custom requests and the OpenAI keyword extractor. You pick a fallback chain of image sources: if the first source fails, the next one is tried. Photo sources: Bing Images, Pixabay, Openverse, Flickr, Unsplash, Pexels, YouTube. AI sources: GPT Image, Stable Diffusion, Replicate, Ideogram, Flux 2, Gemini (Nano Banana), Grok. Optional style presets (photorealistic, cinematic, “no text”…) apply to AI sources only. You can also use the first image already in the post, or a default fallback image, and optionally draw a title / logo bar on the generated file (off by default). Generate from the post editor, the posts list column, bulk actions, Gutenberg, or (Pro) cron and imports. Official Website Documentation What is included ? Magic Post Thumbnail for FREE Featured images for posts, pages and custom post types Insert an image anywhere in the post content (position up to the 10th occurrence) Search based on the title or text analysis Gutenberg block to search and insert images Image sources: Bing Images, GPT Image, Google Image API, Pixabay, Openverse, Flickr Local sources: first image in the post, default fallback image AI style presets and “no text” (when generating with an AI source) Optional title / logo overlay on generated images Generate or regenerate from the posts list Bulk generation for posts or taxonomies Dashboard health check and one-click test generation Magic Post Thumbnail PRO Upgrade to Pro for more image sources, automation and integrations. Customisable crons Several image locations per generation Image sources: Unsplash, Pexels, Stable Diffusion, Replicate, Ideogram, Flux 2, Gemini (Nano Banana), Grok More results in the Gutenberg block Search based on tags, categories, paragraph analyser, custom fields, custom request and OpenAI keyword extractor Image modifications: flip horizontally and/or crop by 10% Compatibility with REST, WPeMatico, FeedWordPress, WP All Import, Featured Image from URL, CMB2, ACF and Meta Box Restricted domains and proxy Priority support with replies within 24 hours Youtube Tutorial Translations English French Spanish Russian Portuguese (Brazil) Portuguese (Portugal) Italian Japanese German Dutch Polish Turkish Vietnamese Chinese (Simplified) Chinese (Traditional) Korean Arabic Indonesian Ukrainian Support the plugin If you’ve found the plugin useful, please consider making a donation. Thank you for your support !

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C