Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
enable-media-replace
WordPress
· Plugin
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Enable Media Replace < 4.2.3 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2026-114431
enable-media-replace
WordPress
Medium
Fix reported
2026-11-05
Enable Media Replace <= 4.2.2 - Authenticated (Subscriber+) PHP Object Injection
CVE-2026-73186
enable-media-replace
WordPress
High
Fix reported
2026-11-03
Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection
CVE-2026-114422
enable-media-replace
WordPress
High
Fix reported
2026-11-03
Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow
CVE-2026-85655
enable-media-replace
WordPress
Medium
Fix reported
2026-10-28
Enable Media Replace <= 4.2.1 - Authenticated (Editor+) Stored Cross-Site Scripting
CVE-2026-57722
enable-media-replace
WordPress
Medium
Fix reported
2026-07-07
Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter
CVE-2026-5714
enable-media-replace
WordPress
Medium
Fix reported
2026-06-09
Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace
CVE-2026-2732
enable-media-replace
WordPress
Medium
Fix reported
2026-03-04
Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode
CVE-2025-9496
enable-media-replace
WordPress
Medium
Fix reported
2025-10-11
Enable Media Replace <= 4.1.5 - Reflected Cross-Site Scripting
CVE-2025-31081
enable-media-replace
WordPress
Medium
Fix reported
2025-04-09
Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting
CVE-2023-6737
enable-media-replace
WordPress
Medium
Fix reported
2024-07-30
Enable Media Replace <= 3.6.3 - Authenticated (Administrator+) Path Traversal
CVE-2022-2554
enable-media-replace
WordPress
Medium
Fix reported
2024-01-22
Enable Media Replace <= 4.1.2 - Authenticated(Author+) PHP Object Injection
CVE-2023-4643
enable-media-replace
WordPress
Medium
Fix reported
2024-01-22
Enable Media Replace <= 4.0.1 - Authenticated (Author+) Arbitrary File Upload
CVE-2023-0255
enable-media-replace
WordPress
High
Fix reported
2024-01-22
