CVE-2026-73340

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Contributor-level Cross Site Scripting (XSS) vulnerability in Featured Image from URL plugin versions up to and including 5.3.3.

A contributor can inject malicious scripts that execute in other users' browsers, potentially leading to session theft or other attacks.

Update the Featured Image from URL plugin to a version newer than 5.3.3.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.