WordPress Enable Media Replace Plugin <= 4.1.4 is vulnerable to Cross Site Scripting (XSS)

🗓️ 14 Dec 2023 00:00:00Reported by Nex TeamType

WordPress Enable Media Replace Plugin <= 4.1.4 Cross Site Scripting (XSS) Vulnerabilit

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2023-6737	11 Jan 202409:15	–	cve
WPVulnDB	Enable Media Replace < 4.1.5 - Reflected Cross-Site Scripting	19 Dec 202300:00	–	wpvulndb
Prion	Cross site scripting	11 Jan 202409:15	–	prion
Cvelist	CVE-2023-6737	11 Jan 202408:32	–	cvelist
NVD	CVE-2023-6737	11 Jan 202409:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023)	5 Jan 202413:20	–	wordfence

Vulners

Node

shortpixel enable_media_replaceRange≤4.1.4wordpress

Source	Link
wordpress	www.wordpress.org/plugins/enable-media-replace/
cve	www.cve.org/CVERecord
plugins	www.plugins.trac.wordpress.org/changeset/3010103
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/enable-media-replace/enable-media-replace-414-reflected-cross-site-scripting

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.1