Skip to content
Noroxi

Enable Media Replace

enable-media-replace · plugin

Known security vulnerabilities for Enable Media Replace. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Jul 1, 2026

Vulnerabilities

  • CVE-2025-31081

    WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-5714

    Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter

    Medium 6.4

  • CVE-2025-9496

    Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode

    Medium 6.4

  • CVE-2023-6737

    Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting

    Medium 6.1

  • CVE-2026-57722

    WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2026-2732

    Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace

    Medium 5.4

← Back to directory