Featured Image from URL

Authenticated (Contributor+) Stored CrossSite Scripting via Featured Image Custom Fields vulnerability <= 5.2.7

Authenticated (Admin+) SQL Injection vulnerability <= 5.2.7

Missing Authorization to Password Protected Post Disclosure vulnerability <= 5.2.7

Unauthenticated Information Exposure via Log File vulnerability <= 5.2.7

Broken Access Control vulnerability <= 4.8.2