TI-2025-06976 CVE-2025-7643 · GHSA-75r2-23g8-v39p
Attachment Manager <= 2.1.2 - Unauthenticated Arbitrary File Deletion
Priority MEDIUM 49
The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_actions() function in all versions up to, and including, 2.1.2.