CVE-2025-62888 - WordPress WP Attachments plugin <= 5.2 - broken access control vulnerability

CVE ID : CVE-2025-62888 Published : Dec. 31, 2025, 2:17 p.m. | 48 minutes ago Description : Missing Authorization vulnerability in Marco Milesi WP Attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attachments: from n/a through 5.2. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor