TI-2025-05432 CVE-2025-6012 · GHSA-pwhq-m8r7-x5jq
Auto Attachments <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Priority LOW 25
The Auto Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.5 due to insufficient input sanitization and output escaping.