{"id":2970,"date":"2025-12-22T16:31:06","date_gmt":"2025-12-22T16:31:06","guid":{"rendered":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/"},"modified":"2025-12-22T16:31:14","modified_gmt":"2025-12-22T16:31:14","slug":"featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity","status":"publish","type":"post","link":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/","title":{"rendered":"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity"},"content":{"rendered":"<h2>Understanding the Featured Image Plugin XSS Vulnerability<\/h2>\n<p>The &#8220;Featured Image&#8221; plugin for WordPress, in versions up to and including 2.1, has a significant security flaw. This vulnerability, known as Stored Cross-Site Scripting (XSS), occurs because the plugin doesn&#8217;t properly clean up or &#8220;escape&#8221; certain information related to images before showing it on your website. Specifically, the &#8220;alt text&#8221; and &#8220;caption&#8221; you assign to images are affected.<\/p>\n<p>This means that if someone with administrative access (or higher) to your WordPress site uploads an image and puts malicious code into its alt text or caption, that code can be saved directly into your website&#8217;s database. Later, whenever a visitor views a page where this featured image is displayed, the malicious code will automatically run in their web browser. This issue primarily impacts WordPress multi-site installations or regular installations where the <code>unfiltered_html<\/code> option has been turned off.<\/p>\n<h2>CVE Details<\/h2>\n<ul>\n<li><strong>Product Name:<\/strong> Featured Image plugin for WordPress<\/li>\n<li><strong>Published Date:<\/strong> November 11, 2025<\/li>\n<li><strong>Severity:<\/strong> Medium<\/li>\n<li><strong>Status:<\/strong> Analyzed<\/li>\n<\/ul>\n<h2>Affected Products<\/h2>\n<p>This vulnerability affects the &#8220;Featured Image&#8221; plugin for WordPress. Specifically, all versions up to and including 2.1 are vulnerable. If you are using any version within this range, your website is at risk.<\/p>\n<h2>Current Status<\/h2>\n<p>As of November 11, 2025, this vulnerability has been &#8220;Analyzed.&#8221; This means the details of the flaw are understood and documented by security researchers.<\/p>\n<h2>Severity Level<\/h2>\n<p>Rated as &#8220;Medium&#8221; severity, this Stored Cross-Site Scripting vulnerability can still lead to serious consequences. While it requires an authenticated administrator to inject the malicious code, once injected, it can affect all users who visit the compromised pages. This could result in sensitive information theft, unauthorized actions being performed on behalf of the user, or defacement of the website. Because the code is &#8220;stored&#8221; on the server, it persists until removed, making it a persistent threat.<\/p>\n<h2>Possible Solutions<\/h2>\n<p>To protect your WordPress website from this vulnerability, here are the recommended steps:<\/p>\n<ol>\n<li><strong>Update the Plugin:<\/strong> The most crucial step is to update your &#8220;Featured Image&#8221; plugin to a version higher than 2.1 as soon as a patch becomes available from the developer. Always keep your plugins, themes, and WordPress core updated to their latest secure versions.<\/li>\n<li><strong>Review Image Metadata:<\/strong> If an update is not immediately available, carefully review all existing image alt texts and captions, especially those uploaded by administrators, for any suspicious code.<\/li>\n<li><strong>Implement Input Validation and Output Escaping:<\/strong> For developers, the core issue lies in insufficient input sanitization and output escaping. Future versions of the plugin should use WordPress&#8217;s built-in functions like <code>esc_attr()<\/code> for attributes (like image alt text) and <code>esc_html()<\/code> for HTML content (like captions) to prevent similar injection attacks.<\/li>\n<li><strong>Consider Disabling:<\/strong> If no immediate fix or update is available, consider temporarily deactivating the &#8220;Featured Image&#8221; plugin until a secure version is released. Assess the impact this might have on your site&#8217;s functionality before doing so.<\/li>\n<\/ol>\n<h2>References<\/h2>\n<p>https:\/\/github.com\/zast-ai\/vulnerability-reports\/blob\/main\/wordpress\/plugin\/featured-image\/stored-xss.md<\/p>\n<p>https:\/\/plugins.trac.wordpress.org\/browser\/featured-image\/tags\/2.1\/featured-image.php#L26<\/p>\n<p>https:\/\/plugins.trac.wordpress.org\/browser\/featured-image\/tags\/2.1\/featured-image.php#L35<\/p>\n<p>https:\/\/plugins.trac.wordpress.org\/browser\/featured-image\/tags\/2.1\/featured-image.php#L65<\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"fPcl3W3JJr\"><p><a href=\"https:\/\/wordpress.org\/plugins\/featured-image\/\">Featured Image<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Featured Image&#8221; &#8212; Plugin Directory\" src=\"https:\/\/wordpress.org\/plugins\/featured-image\/embed\/#?secret=eOOUXNFcbX#?secret=fPcl3W3JJr\" data-secret=\"fPcl3W3JJr\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<p>https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/fa16605a-12bd-48a8-b9a9-db53bf3c2c39?source=cve<\/p>\n<p>https:\/\/github.com\/zast-ai\/vulnerability-reports\/blob\/main\/wordpress\/plugin\/featured-image\/stored-xss.md<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Understanding the Featured Image Plugin XSS Vulnerability The &#8220;Featured Image&#8221; plugin for WordPress, in versions up to and including 2.1, has a significant security flaw. This vulnerability, known as Stored Cross-Site Scripting (XSS), occurs because the plugin doesn&#8217;t properly clean up or &#8220;escape&#8221; certain information related to images before showing it on your website. Specifically, [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":2545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[876,715,695,726,692],"class_list":["post-2970","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-featured-image","tag-plugin-vulnerability","tag-web-security","tag-wordpress","tag-xss"],"blocksy_meta":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity - Web Hosting and IT Consultancy Services<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity - Web Hosting and IT Consultancy Services\" \/>\n<meta property=\"og:description\" content=\"Understanding the Featured Image Plugin XSS Vulnerability The &#8220;Featured Image&#8221; plugin for WordPress, in versions up to and including 2.1, has a significant security flaw. This vulnerability, known as Stored Cross-Site Scripting (XSS), occurs because the plugin doesn&#8217;t properly clean up or &#8220;escape&#8221; certain information related to images before showing it on your website. Specifically, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting and IT Consultancy Services\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-22T16:31:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-22T16:31:14+00:00\" \/>\n<meta name=\"author\" content=\"Alex Joseph\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alex Joseph\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/\"},\"author\":{\"name\":\"Alex Joseph\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/person\\\/1ba9bfab02a76dee216c9f55bb634e56\"},\"headline\":\"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity\",\"datePublished\":\"2025-12-22T16:31:06+00:00\",\"dateModified\":\"2025-12-22T16:31:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/\"},\"wordCount\":560,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"keywords\":[\"Featured Image\",\"Plugin Vulnerability\",\"Web Security\",\"WordPress\",\"Xss\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/\",\"name\":\"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity - Web Hosting and IT Consultancy Services\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"datePublished\":\"2025-12-22T16:31:06+00:00\",\"dateModified\":\"2025-12-22T16:31:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"width\":1024,\"height\":576},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#website\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\",\"name\":\"Web Hosting and IT Consultancy Services\",\"description\":\"Discover the Potential of Digital Transformation through Effortless Hosting and Professional IT Consulting!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#organization\",\"name\":\"Web Hosting and IT Consultancy Services\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/ucartzLogo-1.png\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/ucartzLogo-1.png\",\"width\":165,\"height\":50,\"caption\":\"Web Hosting and IT Consultancy Services\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/person\\\/1ba9bfab02a76dee216c9f55bb634e56\",\"name\":\"Alex Joseph\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g\",\"caption\":\"Alex Joseph\"},\"description\":\"Alex Joseph is a Senior Support Staff professional with deep experience in server management, web hosting technologies, and cybersecurity operations. He works daily with Linux servers, cloud platforms, performance tuning, and security hardening, giving him strong real-world technical knowledge. Along with his support role, he write about security best practices, hosting infrastructure, and software management.\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/author\\\/alexjoseph\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity - Web Hosting and IT Consultancy Services","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/","og_locale":"en_US","og_type":"article","og_title":"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity - Web Hosting and IT Consultancy Services","og_description":"Understanding the Featured Image Plugin XSS Vulnerability The &#8220;Featured Image&#8221; plugin for WordPress, in versions up to and including 2.1, has a significant security flaw. This vulnerability, known as Stored Cross-Site Scripting (XSS), occurs because the plugin doesn&#8217;t properly clean up or &#8220;escape&#8221; certain information related to images before showing it on your website. Specifically, [&hellip;]","og_url":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/","og_site_name":"Web Hosting and IT Consultancy Services","article_published_time":"2025-12-22T16:31:06+00:00","article_modified_time":"2025-12-22T16:31:14+00:00","author":"Alex Joseph","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alex Joseph","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#article","isPartOf":{"@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/"},"author":{"name":"Alex Joseph","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/person\/1ba9bfab02a76dee216c9f55bb634e56"},"headline":"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity","datePublished":"2025-12-22T16:31:06+00:00","dateModified":"2025-12-22T16:31:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/"},"wordCount":560,"commentCount":0,"publisher":{"@id":"https:\/\/www.ucartz.com\/updates\/#organization"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","keywords":["Featured Image","Plugin Vulnerability","Web Security","WordPress","Xss"],"articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/","url":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/","name":"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity - Web Hosting and IT Consultancy Services","isPartOf":{"@id":"https:\/\/www.ucartz.com\/updates\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#primaryimage"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","datePublished":"2025-12-22T16:31:06+00:00","dateModified":"2025-12-22T16:31:14+00:00","breadcrumb":{"@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#primaryimage","url":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","contentUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","width":1024,"height":576},{"@type":"BreadcrumbList","@id":"https:\/\/www.ucartz.com\/updates\/featured-image-plugin-stored-cross-site-scripting-vulnerability-cve-2025-12019-medium-severity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ucartz.com\/updates\/"},{"@type":"ListItem","position":2,"name":"Featured Image Plugin Stored Cross-Site Scripting Vulnerability (CVE-2025-12019) \u2014 Medium Severity"}]},{"@type":"WebSite","@id":"https:\/\/www.ucartz.com\/updates\/#website","url":"https:\/\/www.ucartz.com\/updates\/","name":"Web Hosting and IT Consultancy Services","description":"Discover the Potential of Digital Transformation through Effortless Hosting and Professional IT Consulting!","publisher":{"@id":"https:\/\/www.ucartz.com\/updates\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ucartz.com\/updates\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.ucartz.com\/updates\/#organization","name":"Web Hosting and IT Consultancy Services","url":"https:\/\/www.ucartz.com\/updates\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/logo\/image\/","url":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/ucartzLogo-1.png","contentUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/ucartzLogo-1.png","width":165,"height":50,"caption":"Web Hosting and IT Consultancy Services"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/person\/1ba9bfab02a76dee216c9f55bb634e56","name":"Alex Joseph","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g","caption":"Alex Joseph"},"description":"Alex Joseph is a Senior Support Staff professional with deep experience in server management, web hosting technologies, and cybersecurity operations. He works daily with Linux servers, cloud platforms, performance tuning, and security hardening, giving him strong real-world technical knowledge. Along with his support role, he write about security best practices, hosting infrastructure, and software management.","url":"https:\/\/www.ucartz.com\/updates\/author\/alexjoseph\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/2970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/comments?post=2970"}],"version-history":[{"count":1,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/2970\/revisions"}],"predecessor-version":[{"id":2971,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/2970\/revisions\/2971"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/media\/2545"}],"wp:attachment":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/media?parent=2970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/categories?post=2970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/tags?post=2970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}