Unsecured vulnerability since April 2025

  • Dan Knauss

    (@dpknauss)


    1 month, 1 week ago

    The WordPress Canonical Attachments plugin up to version 1.8 has a known Cross-Site Scripting (XSS) vulnerability, tracked as CVE-2025-32543 and first published 2025-04-09. Because the plugin fails to sanitize user inputs, unauthenticated attackers could inject malicious scripts. As of mid-2026, no official patch is available.

You must be logged in to reply to this review.