cleantalk
Vulnerabilities and Security Researches

Enable Media Replace, PSC-2026-64661

PSC, Research URL

PSC-2026-64661

Application

Enable Media Replace

Published on
May 26, 2026
Research Description
Media replacement plugins work directly with the WordPress upload directory, attachment records, file names, MIME types, and references embedded across posts and pages. That makes them operationally useful, but also security-sensitive: insufficient checks can lead to arbitrary file upload, unauthorized file overwrite, path manipulation, or integrity damage to existing content. Enable Media Replace version 4.1.9 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64661, confirming that the plugin was reviewed from a secure code perspective with attention to common exploitation paths for media management and file replacement plugins.
Affected versions
Min 4.1.9, max 4.1.9.
Status
SAFE & CERTIFIED