A vulnerability classified as problematic has been found in Attachments Handler Plugin up to 1.1.7 on WordPress. The affected element is an unknown function. This manipulation causes cross site scripting.
This vulnerability is handled as CVE-2025-12581. The attack can be initiated remotely. There is not any exploit available.
