← Back

Toastwebsites

toastwebsites

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Find Unused Images
find_unused_images
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-11996
1Toastwebsites
1Find Unused Images
Jun 17, 2026
Nov 11, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fui_delete_image() and fui_delete_all_images() functiosn in all versions up to, and includin...Show more
The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fui_delete_image() and fui_delete_all_images() functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site's attachments.Show less