VendorsMarco Milesiwp_attachmentsall versions
Vulnerabilities

Marco Milesi WP Attachments

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2023-45651
WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-10-16 · Modified
8.8EPSS 0.002
CVE-2022-3469
WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting
Published 2022-11-14 · Modified
4.8EPSS 0.006
CVE-2022-4330
WP Attachments < 5.0.6 - Admin+ Stored XSS
Published 2023-01-16 · Modified
4.8EPSS 0.005