Approved changes feed: RSS · Atom

cpe:2.3:a:marco_milesi:wp_attachments:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMarco Milesi (a7a221c0-bb31-51e5-b66c-e02024fa56f0)
ProductWp Attachments (1491ff08-9aa3-5673-9463-1a0597c0115e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62888 vulnerable 2026-06-08 07:39:16.978160 WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attachments: from n/a through <= 5.2.
Published: 2025-12-31T14:17:55.113Z
Updated: 2026-04-28T16:14:04.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45651 vulnerable 2026-06-08 06:12:43.056017 WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a through 5.0.11.
Published: 2023-10-16T08:41:39.143Z
Updated: 2026-04-28T16:08:43.834Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.