CVE-2026-73340

The vulnerability affects the Featured Image from URL plugin in versions up to 5.3.3, allowing for a Contributor-level Cross Site Scripting (XSS) attack. This could enable an attacker to inject malicious scripts into web pages viewed by other users, potentially compromising user data and site integrity. Organizations using this plugin should prioritize patching to mitigate the risk of exploitation.