CVE-2025-9985

MEDIUM EXPLOITED NUCLEI

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Sensitive Information Exposure via Publicly Exposed Log Files

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-9985 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.

Nuclei Templates (1)

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
MEDIUMVERIFIEDby zer0p0int

References (3)

Core 3

Scores

CVSS v3 5.3
EPSS 0.0221
EPSS Percentile 84.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

VulnCheck KEV 2025-11-27
CWE
CWE-532
Status published
Products (1)
marceljm/Featured Image from URL (FIFU) < 5.2.7
Published Sep 26, 2025
Tracked Since Feb 18, 2026