<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: shortpixel-enable-media-replace</title><description>Every new CVE for shortpixel-enable-media-replace.</description><link>https://agentprime.io/</link><item><title>CVE-2026-73186: WordPress Enable Media Replace plugin &lt;= 4.2.2 - PHP Object Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-73186/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73186/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 18:30:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85655: Enable Media Replace &lt;= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow</title><link>https://agentprime.io/advisories/CVE-2026-85655/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85655/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 07:48:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57722: WordPress Enable Media Replace plugin &lt;= 4.2.1 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57722/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57722/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 17:07:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5714: Enable Media Replace &lt;= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via &apos;location_dir&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-5714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5714/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 02:28:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2732: Enable Media Replace &lt;= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace</title><link>https://agentprime.io/advisories/CVE-2026-2732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2732/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 06:26:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9496: Enable Media Replace &lt;= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode</title><link>https://agentprime.io/advisories/CVE-2025-9496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9496/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Oct 2025 07:25:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-31081: WordPress Enable Media Replace plugin &lt;= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-31081/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-31081/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Apr 2025 20:58:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6737: Enable Media Replace &lt;= 4.1.4 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2023-6737/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6737/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 08:32:57 GMT</pubDate><category>CVE</category></item></channel></rss>