Featured Image from Content WordPress Plugin Authenticated Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in the Featured Image from Content WordPress plugin, affecting versions prior to 1.7. This vulnerability allows authenticated users with Author-level permissions to access internal HTTP resources. Exploitation of this vulnerability could lead to the retrieval of sensitive internal data, which could then be stored in web-accessible upload directories.

Impact

Exploitation of this vulnerability could result in unauthorized access to internal HTTP resources, allowing for the retrieval of sensitive data that could be exposed through web-accessible upload directories.