Add Featured Image Custom Link Security & Risk Analysis

wordpress.org/plugins/custom-url-to-featured-image

Try it out on your free dummy site: Click here => https://tastewp.com/new?pre-installed-plugin-slug=custom-url-to-featured-image&redirect=plugi …

1K active installs v2.0.0 PHP 5.2.4+ WP 3.8+ Updated May 14, 2024
custom-linkcustom-url-to-featured-imageexternal-linkexternal-link-to-featured-imagefeatured-image-custom-link
70
B · Generally Safe
CVEs total1
Unpatched1
Last CVEDec 31, 2025
Safety Verdict

Is Add Featured Image Custom Link Safe to Use in 2026?

Mostly Safe

Score 70/100

Add Featured Image Custom Link is generally safe to use though it hasn't been updated recently. 1 past CVE were resolved. Keep it updated.

1 known CVE 1 unpatched Last CVE: Dec 31, 2025Updated 1yr ago
Risk Assessment

The plugin 'custom-url-to-featured-image' version 2.0.0 demonstrates several positive security practices, including 100% use of prepared statements for SQL queries, proper output escaping, and the presence of nonce and capability checks. The static analysis reveals a minimal attack surface with no exposed AJAX handlers, REST API routes, shortcodes, or cron events, which is commendable for reducing potential entry points for attackers. The taint analysis also shows no identified flows with unsanitized paths, indicating a potentially well-written codebase regarding input handling.

Key Concerns

  • Unpatched Medium Severity CVE
  • Known Cross-site Scripting Vulnerability History
Vulnerabilities
1

Add Featured Image Custom Link Security Vulnerabilities

CVEs by Year

1 CVE in 2025 · unpatched
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-62119medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Add Featured Image Custom Link <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting

Dec 31, 2025Unpatched
Code Analysis
Analyzed Mar 16, 2026

Add Featured Image Custom Link Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
3 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped3 total outputs
Attack Surface

Add Featured Image Custom Link Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionadd_meta_boxesadmin\class-cust-li-fi-admin.php:132
actionsave_postadmin\class-cust-li-fi-admin.php:134
actionpost_thumbnail_htmladmin\class-cust-li-fi-admin.php:136
Maintenance & Trust

Add Featured Image Custom Link Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedMay 14, 2024
PHP min version5.2.4
Downloads21K

Community Trust

Rating82/100
Number of ratings15
Active installs1K
Developer Profile

Add Featured Image Custom Link Developer Profile

ViitorCloud Technologies Pvt Ltd

10 plugins · 3K total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Add Featured Image Custom Link

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/custom-url-to-featured-image/admin/class-cust-li-fi-admin.php

HTML / DOM Fingerprints

CSS Classes
ex-link
Data Attributes
id="custom_url_image"name="custom_url_image"id="custom_url_image"name="custom_url_image"id="custom_url_image"name="custom_url_image"
FAQ

Frequently Asked Questions about Add Featured Image Custom Link