A vulnerability was found in Quick Featured Images Plugin up to 13.7.3 on WordPress. It has been rated as critical. This affects the function
delete_orphaned. The manipulation leads to sql injection.
This vulnerability is referenced as CVE-2025-11980. Remote exploitation of the attack is possible. No exploit is available.
