Vulnerabilities / Enable Media Replace
Enable Media Replace vulnerabilities
Advisories WPSec published for Enable Media Replace. Other sources may list more. Its attack surface: Enable Media Replace on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1780 | Enable Media Replace <= 4.2.2 - Authenticated (Author+) PHP Object Injection via Database Replacement | High 7.5 | 4.2.3 |
| 2026-10-27 | WPSEC-2026-1779 | Enable Media Replace <= 4.2.2 - Authenticated (Author+) Path Traversal via 'location_dir' Parameter | Low 3.1 | 4.2.3 |
License: CC BY 4.0