CVE-2026-73340

WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.

We have discovered 2,606 live websites that are affected by CVE-2026-73340.

Run a Free Instant Scan



Affected Software

Product  Featured Image From Url
Category Wordpress Plugins
Vulnerable Domains2,606 live websites (100% of Featured Image From Url install base)
Vulnerable Versions
  • from 0 through 5.3.3
Vulnerable Versions Count116 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Aug 13, 2026
  • Updated - Aug 13, 2026

Credits

  • luc | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-73340
United States1,129 websites


Germany172 websites
GB119 websites
Sweden89 websites
Cyprus85 websites
Russia77 websites
France56 websites
India49 websites
Denmark49 websites
Netherlands46 websites

Website Distribution by TLD

Number of websites using CVE-2026-73340
.com1,354 websites
.org117 websites
.net114 websites
.se66 websites
.ru66 websites
.de57 websites
.dk57 websites
.nl39 websites
.co.uk34 websites
.it32 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-73340

Top websites that are affected by CVE-2026-73340. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*********.com United States**,***
***.***.il Germany**,***
***************.com India**,***
***********.io Vietnam***,***
***********.org United States***,***
**************.vn Vietnam***,***
********.com Australia***,***
****.org United States***,***
*********.com United States***,***
****.*************.com United States***,***
See full domain list

FAQ

CVE-2026-73340 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Featured Image From Url
A total of 2,606 websites have been identified as vulnerable to CVE-2026-73340, based on global website indexing conducted by WebTechSurvey.
The Featured Image From Url is affected by the CVE-2026-73340 vulnerability.
Featured Image From Url versions up to and including 5.3.3 are vulnerable to CVE-2026-73340.