Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Marco Milesi Component: Wp Attachments Clear all filters
TI-2022-03965 CVE-2022-4330 · GHSA-7cjc-c9jv-7878

WP Attachments < 5.0.6 - Admin+ Stored XSS

Priority LOW 23

The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-01-16 Fixed in 5.0.6 CWE-79
TI-2022-03203 CVE-2022-3469 · GHSA-r5c5-p2gw-prwf

WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00583 Published 2022-11-14 Fixed in 5.0.5 CWE-79