Skip to content
OpenAdvisories

Product · aaroncampbell

Attachment Manager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-7643

    Attachment Manager <= 2.1.2 - Unauthenticated Arbitrary File Deletion

    The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_actions() function in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to…

    aaroncampbell Attachment Manager Web / CMS