EM
Product
Enable Media Replace
7
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add Enable Media Replace to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4643 | 8.8 | Oct 16 | The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection… Affected: before 4.1.3 |
| CVE-2023-0255 | 8.8 | Feb 13 | The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected… Affected: before 4.0.2 |
Showing 2