Title: Security Vulnerability
Last modified: May 3, 2024

---

# Security Vulnerability

 *  [mikepalmer](https://wordpress.org/support/users/mikepalmer/)
 * (@mikepalmer)
 * [2 years, 5 months ago](https://wordpress.org/support/topic/security-vulnerability-135/)
 * Wordfence is reporting a security vulnerability with this plugin. When will it
   be patched?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Gwyneth Llewelyn](https://wordpress.org/support/users/gwynethllewelyn/)
 * (@gwynethllewelyn)
 * [2 years, 5 months ago](https://wordpress.org/support/topic/security-vulnerability-135/#post-17733336)
 * For the sake of completeness, here you can read a bit more about the issue:
 * [https://www.cve.org/CVERecord?id=CVE-2024-33629](https://www.cve.org/CVERecord?id=CVE-2024-33629)
 * [https://patchstack.com/database/vulnerability/auto-post-thumbnail/wordpress-auto-featured-image-auto-post-thumbnail-plugin-4-0-0-server-side-request-forgery-ssrf-vulnerability](https://patchstack.com/database/vulnerability/auto-post-thumbnail/wordpress-auto-featured-image-auto-post-thumbnail-plugin-4-0-0-server-side-request-forgery-ssrf-vulnerability)
 * and, of course, from Wordfence themselves:
 * [https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/auto-post-thumbnail-2/auto-featured-image-auto-post-thumbnail-400-authenticated-author-server-side-request-forgery](https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/auto-post-thumbnail-2/auto-featured-image-auto-post-thumbnail-400-authenticated-author-server-side-request-forgery)
 * It’s unlikely that this vulnerability can be successfully exploited — it’s therefore
   relatively low-risk. Nevertheless, there _is_ a vulnerability, which most definitely
   should be patched & fixed ASAP.
 *  [Alexander Kovalev](https://wordpress.org/support/users/alexkovalevv/)
 * (@alexkovalevv)
 * [2 years, 5 months ago](https://wordpress.org/support/topic/security-vulnerability-135/#post-17734674)
 * We are trying to find out more about this vulnerability, it may already be closed.
   In any case, it does not pose a threat to your site.
 * We will try to release the update as soon as possible!
 *  [xeinar](https://wordpress.org/support/users/xeinar/)
 * (@xeinar)
 * [2 years, 5 months ago](https://wordpress.org/support/topic/security-vulnerability-135/#post-17757811)
 * Hi Alexander, is there an estimated time of delivery for the patch? While it 
   is partially reassuring that the vulnerability is low risk, as someone else said
   there still is a vulnerabilty and it might be exploited.
 * Thanks for your support!

Viewing 3 replies - 1 through 3 (of 3 total)

 The topic ‘Security Vulnerability’ is closed to new replies.

 * ![](https://ps.w.org/auto-post-thumbnail/assets/icon-256x256.gif?rev=3469511)
 * [Auto Featured Image (Auto Post Thumbnail)](https://wordpress.org/plugins/auto-post-thumbnail/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/auto-post-thumbnail/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/auto-post-thumbnail/)
 * [Active Topics](https://wordpress.org/support/plugin/auto-post-thumbnail/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/auto-post-thumbnail/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/auto-post-thumbnail/reviews/)

 * 6 replies
 * 4 participants
 * Last reply from: [xeinar](https://wordpress.org/support/users/xeinar/)
 * Last activity: [2 years, 5 months ago](https://wordpress.org/support/topic/security-vulnerability-135/#post-17757811)
 * Status: not resolved