Authorization Flaw in WebDevStudios Automatic Featured Images Plugin for WordPress

CVE-2025-31820

What is CVE-2025-31820?

A missing authorization vulnerability exists in the Automatic Featured Images from Videos plugin by WebDevStudios. This flaw can allow attackers to exploit improperly configured access control security levels, potentially gaining unauthorized access to sensitive features. The affected versions range from an unspecified release through 1.2.4, highlighting the need for users to promptly update their installations to safeguard against possible exploitation. Regular monitoring and application of security patches are essential to maintain the integrity of WordPress sites utilizing this plugin.

References