Enable Media Replace Security Vulnerabilities and Issues — Enable Media Replace CVE List

Lucene search

ShortpixelEnable Media Replace

2 matches found

CVE•added 2023/02/13 3:15 p.m.•80 views

CVE-2023-0255

The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

8.8CVSS8.8AI score0.00864EPSS

CVE•added 2023/10/16 8:15 p.m.•36 views

CVE-2023-4643

The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog

8.8CVSS8.9AI score0.00341EPSS