CVE-2025-31081 WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShortPixel Enable Media Replace allows Reflected XSS. This issue affects Enable Media Replace: from n/a through 4.1.5...

CVE-2025-31081

CVE-2025-31081: Reflected XSS in Enable Media Replace (WordPress plugin) due to improper input neutralization during web page generation. Affected: Enable Media Replace versions up to and including 4.1.5. CVSSv3.1 base score 7.1 (HIGH). Remediation: upgrade to version 4.1.5 or later. The connecte...