Find Unused Images

1 CVEs product

Monthly

CVE-2025-11996 MEDIUM This Month

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fui_delete_image() and fui_delete_all_images() functiosn in all. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Find Unused Images PHP
NVD
CVSS 3.1
5.3
EPSS
0.1%
EPSS 0% CVSS 5.3
MEDIUM This Month

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fui_delete_image() and fui_delete_all_images() functiosn in all. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Find Unused Images +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy