Unknown Enable Media Replace

• CVE-2026-114431 Medium 6.4 Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload 0.2%
• CVE-2026-114422 High 7.5 Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer 0.5%
• CVE-2023-4643 High 8.8 Enable Media Replace < 4.1.3 - Author+ PHP Object Injection 1.1%
• CVE-2023-0255 High 8.8 Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload 1.1%
• CVE-2022-2554 Unrated Enable Media Replace < 4.0.0 - Admin+ Path Traversal 1.0%