Advisories · Technology
ShortPixel Enable Media Replace.
Every CVE that names ShortPixel Enable Media Replace among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability
- ShortPixel Enable Media Replace
- Insecure deserialization
- CVSS 4.3 Medium
Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow
- shortpixel Enable Media Replace
- Broken access control
- CVSS 5.9 Medium
WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability
- ShortPixel Enable Media Replace
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter
- shortpixel Enable Media Replace
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace
- shortpixel Enable Media Replace
- Broken access control
- CVSS 6.4 Medium
Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode
- shortpixel Enable Media Replace
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
- ShortPixel Enable Media Replace
- Cross-site scripting (XSS)
- CVSS 4.7 Medium
Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting
- shortpixel Enable Media Replace
- Cross-site scripting (XSS)