sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total13
Critical0
High5
Medium8
Reset
Showing 1-13 of 13 records
Threat Entry Updated 2026-11-04

Enable Media Replace - Security Vulnerability (CVE-2026-114431)

The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload pipeline, so the upload prefilter that SVG-sanitizer Enable Media Replace WordPress plugin before 4.2.3 rely on never runs, allowing an authenticated user with upload access to store an SVG file containing script that executes when the file is opened directly. It requires an SVG-enabling Enable Media Replace WordPress plugin before 4.2.3 to be active, as the replace path otherwise rejects SVG uploads.

PLUGIN Enable Media Replace

CVE-2026-114431

MEDIUM CVSS 6.4 2026-11-04
Open Full Technical Breakdown
Threat Entry Updated 2026-10-30

Enable Media Replace - Security Vulnerability (CVE-2026-114422)

The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a routine media replacement, resulting in PHP Object Injection and local file inclusion of existing PHP/HTML files, which can be escalated to remote code execution where an attacker-influenced PHP or HTML file is present on the server. This is a regression of CVE-2023-4643, which was fixed in 4.1.3 and…

PLUGIN Enable Media Replace

CVE-2026-114422

HIGH CVSS 7.5 2026-10-30
Open Full Technical Breakdown
Threat Entry Updated 2026-11-04

Enable Media Replace - Security Vulnerability (CVE-2026-85655)

The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to modify the post_content of any published post referencing the replaced media — including Administrator-owned posts — making changes immediately visible to unauthenticated visitors. The doReplaceQuery() method performs a database-wide search-and-replace across all posts containing the old media URL without…

PLUGIN Enable Media Replace

CVE-2026-85655

MEDIUM CVSS 4.3 2026-10-28
Open Full Technical Breakdown
Threat Entry Updated 2026-07-23

Enable Media Replace - Cross-Site Scripting (XSS) (CVE-2026-5714)

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parameter in all versions up to, and including, 4.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Enable Media Replace

CVE-2026-5714

MEDIUM CVSS 6.4 2026-06-09
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Enable Media Replace - Security Vulnerability (CVE-2026-2732)

The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewController::load' function in all versions up to, and including, 4.1.7. This makes it possible for authenticated attackers, with Author-level access and above, to replace any attachment with a removed background attachment.

PLUGIN Enable Media Replace

CVE-2026-2732

MEDIUM CVSS 5.4 2026-03-04
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Enable Media Replace - Cross-Site Scripting (XSS) (CVE-2025-9496)

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file_modified shortcode in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Enable Media Replace

CVE-2025-9496

MEDIUM CVSS 6.4 2025-10-11
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Enable Media Replace - Cross-Site Scripting (XSS) (CVE-2023-6737)

The Enable Media Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the SHORTPIXEL_DEBUG parameter in all versions up to, and including, 4.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Exploiting this vulnerability requires the attacker to know the ID of an attachment uploaded by the user they are attacking.

PLUGIN Enable Media Replace

CVE-2023-6737

MEDIUM CVSS 4.7 2024-01-11
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Enable Media Replace - Path Traversal (CVE-2022-2554)

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

PLUGIN Enable Media Replace

CVE-2022-2554

MEDIUM CVSS 4.9 2022-10-10
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.