Plugin icon

WP Attachments

wp-attachments

Vulnerabilities:

5

Last Updated:

March 14, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2025-12-31
Title
Attachments < 5.2.1 - Missing Authorization
Fixed in
Fixed in 5.2.1
CVSS
4.3 (medium)
Published
2025-05-27
Title
WP Attachments < 5.1 - Reflected Cross-Site Scripting via attachment_id Parameter
Fixed in
Fixed in 5.1
CVSS
6.1 (medium)
Published
2023-10-16
Title
WP Attachments < 5.0.12 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 5.0.12
CVSS
4.3 (medium)
Published
2022-12-21
Title
WP Attachments < 5.0.6 - Admin+ Stored XSS
Fixed in
Fixed in 5.0.6
CVSS
3.4 (low)
Published
2022-10-18
Title
WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.0.5
CVSS
3.4 (low)