What’s Vulnerable › Products

WP Attachments vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WP Attachments version is affected

Latest WP Attachments vulnerabilities

• CVE-2025-62888 — WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2023-45651 — WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2022-4330 — WP Attachments < 5.0.6 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2022-3469 — WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)