cbcvebase.

Aaroncampbell Attachment Manager vulnerabilities

1 known vulnerability affecting aaroncampbell/attachment_manager.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-7643P2CRITICALCVSS 9.1≤ 2.1.22025-07-18
CVE-2025-7643 [CRITICAL] CWE-22 CVE-2025-7643: The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insuffic The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_actions() function in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when th
nvd
Aaroncampbell Attachment Manager vulnerabilities | cvebase