Vulnerabilities / WP Attachments
WP Attachments vulnerabilities
Advisories WPSec published for WP Attachments – Smarter File Management & Download Lists. Other sources may list more. Its attack surface: WP Attachments on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-06 | WPSEC-2026-0473 | WP Attachments <= 6.0.3 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure via 'download' Parameter | Medium 5.3 | 6.1 |
License: CC BY 4.0