Enable Media Replace (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-10-16. Vendor: Unknown.

CVEs of Enable Media Replace

• CVE-2023-4643 - CVSS 8.8 (high), 2023-10-16: The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform…
• CVE-2023-0255 - CVSS 8.8 (high), 2023-02-13: The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP…
• CVE-2022-2554 - CVSS 4.9 (medium), 2022-10-10: The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege…