A vulnerability has been found in Quick Featured Images Plugin up to 13.7.2 on WordPress and classified as problematic. This impacts the function
qfi_set_thumbnail. This manipulation causes improper control of resource identifiers.
This vulnerability appears as CVE-2025-11176. The attack may be initiated remotely. There is no available exploit.
