CVE-2026-96671: Fifu.app Featured Image From Url

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.

Affected products

• Fifu.app Featured Image From Url: up to and including 6.0.7

Published 2026-10-09. Last modified 2026-10-09.