CVE-2025-5082

🗓️ 28 May 2025 07:23:57Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 46 Views

WP Attachments plugin vulnerable to Reflected Cross-Site Scripting due to poor sanitization.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-5082	28 May 202507:45	–	circl
CNNVD	WordPress plugin WP Attachments 跨站脚本漏洞	28 May 202500:00	–	cnnvd
CNVD	WordPress WP Attachments plugin cross-site scripting vulnerability	11 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-5082 WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter	28 May 202507:23	–	cvelist
EUVD	EUVD-2025-16285	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5082	28 May 202508:15	–	nvd
Patchstack	WordPress WP Attachments plugin <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter vulnerability	27 May 202523:29	–	patchstack
Positive Technologies	PT-2025-23065 · WordPress · Wp Attachments	28 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5082	30 May 202508:01	–	redhatcve
Vulnrichment	CVE-2025-5082 WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter	28 May 202507:23	–	vulnrichment

Vulners

Node

milmor wp_attachmentsRange≤5.0.12wordpress

[
  {
    "vendor": "milmor",
    "product": "WP Attachments",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.0.12",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/wp-attachments/
plugins	www.plugins.trac.wordpress.org/changeset/3300269/
plugins	www.plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/ij-post-attachments.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/bdc33ecc-da54-4852-8426-bfafe0dca41b
plugins	www.plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/html/attachmentEditIframe.php

15 Apr 2026 00:35Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.00736

SSVC

CWE-79