CVE-2026-61970: Themeisle Auto Featured Image Auto Post Thumbnail

Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.

Affected products

• Themeisle Auto Featured Image Auto Post Thumbnail: up to and including 5.0.4

Published 2026-07-13. Last modified 2026-07-13.