Lucene search
WPScanCVELIST:CVE-2023-4643HistoryOct 16, 2023 - 7:38 p.m.
CVE-2023-4643 Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
2023-10-1619:38:58
WPScan
www.cve.org
wordpress
plugin
v4.1.3
cve-2023-4643
php object injection
remove background
author+ users
0.001 Low
EPSS
Percentile
19.3%
The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog
CNA Affected
[
{
"vendor": "Unknown",
"product": "Enable Media Replace",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "4.1.3"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-4643
2023-10-16 20:15:15
prion
prion
Input validation
2023-10-16 20:15:00
openvas
openvas
wpvulndb
wpvulndb
Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
2023-09-21 00:00:00
nvd
nvd
CVE-2023-4643
2023-10-16 20:15:15
wpexploit
wpexploit
Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
2023-09-21 00:00:00