| CVE-2026-114431 |
Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload
|
6.4
Moyenne
|
4 nov. 2026 |
| CVE-2026-114422 |
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored…
|
7.5
Élevée
|
30 oct. 2026 |
| CVE-2023-4643 |
The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature,…
|
8.8
Élevée
|
16 oct. 2023 |
| CVE-2023-0255 |
The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the…
|
8.8
Élevée
|
13 févr. 2023 |
| CVE-2022-2554 |
The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload…
|
Non notée
|
10 oct. 2022 |