Is CVE-2026-61970 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-61970?

CVE-2026-61970 has a CVSS v3 severity of MEDIUM (4.9).

Back

CVE-2026-61970

Description

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <= 5.0.4.