| CVE-2026-114431 |
Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload
|
6.4
Medium
|
Nov 4, 2026 |
| CVE-2026-114422 |
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored…
|
7.5
High
|
Oct 30, 2026 |
| CVE-2023-4643 |
The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature,…
|
8.8
High
|
Oct 16, 2023 |
| CVE-2023-0255 |
The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the…
|
8.8
High
|
Feb 13, 2023 |
| CVE-2022-2554 |
The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload…
|
Not rated
|
Oct 10, 2022 |