CVE-2023-0255

The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

Score

CVSS 3.1 8.8 High

Status

Modified - contact@wpscan.com

Published

2023-02-13

Last modified

2025-03-21

Weaknesses

CWE-434

Affected products

• Enable Media Replace (Shortpixel)
• Enable Media Replace (Unknown)

References

• https://wpscan.com/vulnerability/b0239208-1e23-4774-9b8c-9611704a07a0