DX Delete Attached Media

DX Delete Attached Media has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (100%).

Every one of the 2 issues recorded for DX Delete Attached Media has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Abdi Pranata. DX Delete Attached Media is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all DX Delete Attached Media vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2023-46073

DX Delete Attached Media <= 2.0.5.1 - Cross-Site Request Forgery via add_to_base

Read the full analysis

Vulnerability Records

2 records


2023-10-16 00:00	DX Delete Attached Media <= 2.0.5.1 - Cross-Site Request Forgery via add_to_base DX Delete Attached Media <= 2.0.5.1	`CVE-2023-46073`	4.3 Medium	Abdi Pranata	Yes
2023-05-04 00:00	DX Delete Attached Media <= 2.0.2 - Missing Authorization to Settings Update DX Delete Attached Media <= 2.0.2	`N/A`	4.3 Medium	Anonymous	Yes

Showing 1–2 of 2 reports

Latestv2.0.6

DX Delete Attached Media

Author

Mario Peshev

4.9(28)

98/100

Last Updated

2023-12-19 (3y ago)

Active Installs

4,000+

Downloads

56,045

Requires WP

4.5+

Requires PHP

7.4+

Tested up to

WP 6.3.10

Created

2012-04-11 (15y ago)

DX Delete Attached Media deletes all of the attached media files to your posts once they get deleted from the system. The standard core behavior deletes posts alone without taking care of related images. Now you can maintain your install and get rid of all solo attachments getting into your posts via the Media button and used nowhere else. The plugin works with WooCommerce and Easy Digital Downloads.

View on WordPress.org