Vulnerabilities in marceljm
8 resultsCVE-2025-9985MEDIUMFeatured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log FileEPSS 11.1%CVE-2023-6561MEDIUMFeatured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt textEPSS 0.4%CVE-2024-1496MEDIUMFeatured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_urlEPSS 0.4%CVE-2025-10037MEDIUMFeatured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL InjectionEPSS 0.3%CVE-2025-10036MEDIUMFeatured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL InjectionEPSS 0.3%CVE-2025-9984MEDIUMFeatured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post DisclosureEPSS 0.3%CVE-2025-13393MEDIUMFeatured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'EPSS 0.2%CVE-2025-7400MEDIUMFeatured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom FieldsEPSS 0.2%