ShortPixel Enable Media Replace

• CVE-2026-73186 High 8.8 WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability 0.4%
• CVE-2026-85655 Medium 4.3 Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow 0.3%
• CVE-2026-57722 Medium 5.9 WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-5714 Medium 6.4 Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter 0.3%
• CVE-2026-2732 Medium 5.4 Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace 0.3%
• CVE-2025-9496 Medium 6.4 Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode 0.2%
• CVE-2025-31081 High 7.1 WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2023-6737 Medium 4.7 Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting 0.5%