All products

wp-attachments

WordPress · Plugin
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Attachments <= 5.2 - Missing AuthorizationCVE-2025-62888 wp-attachments WordPress Medium Fix reported
WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id ParameterCVE-2025-5082 wp-attachments WordPress Medium Fix reported
WP Attachments <= 5.0.11 - Cross-Site Request ForgeryCVE-2023-45651 wp-attachments WordPress Medium Fix reported
WP Attachments <= 5.0.5 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2022-4330 wp-attachments WordPress Medium Fix reported
WP Attachments <= 5.0.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2022-3469 wp-attachments WordPress Medium Fix reported