Skip to content
Shortpixel Enable Media Replace vulnerabilities
-
shortpixel enable media replace
Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload
CVE-2026-114431
6.4 Medium
-
shortpixel enable media replace
WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability
CVE-2026-73186
8.8 High
-
shortpixel enable media replace
Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer
CVE-2026-114422
7.5 High
-
shortpixel enable media replace
Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow
CVE-2026-85655
4.3 Medium
-
shortpixel enable media replace
WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57722
5.9 Medium
-
shortpixel enable media replace
Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter
CVE-2026-5714
6.4 Medium
-
shortpixel enable media replace
Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace
CVE-2026-2732
5.4 Medium
-
shortpixel enable media replace
Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode
CVE-2025-9496
6.4 Medium
-
shortpixel enable media replace
WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31081
7.1 High
-
shortpixel enable media replace
Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting
CVE-2023-6737
4.7 Medium
-
shortpixel enable media replace
Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
CVE-2023-4643
8.8 High
-
shortpixel enable media replace
Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
CVE-2023-0255
8.8 High
-
shortpixel enable media replace
Enable Media Replace < 4.0.0 - Admin+ Path Traversal
CVE-2022-2554
4.9 Medium