A vulnerability marked as problematic has been reported in fifu.app Featured Image From URL Plugin up to 5.3.3 on WordPress. This affects an unknown function. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2026-73340 . The attack is possible to be carried out remotely. No exploit exists.