Enable Media Replace, f4b1dd6a3e69c6d6edbf516b825332a3724c8798

CVE, Research URL: f4b1dd6a3e69c6d6edbf516b825332a3724c8798
Home page URL: Security reports for Enable Media Replace
Application: Enable Media Replace
Published on: Sep 15, 2023
Research Description: Enable Media Replace [enable-media-replace] < 4.1.3 WordPress Enable Media Replace Plugin < 4.1.3 is vulnerable to PHP Object Injection Update the WordPress Enable Media Replace plugin to the latest available version (at least 4.1.3). Unknown discovered and reported this PHP Object Injection vulnerability in WordPress Enable Media Replace Plugin. This could allow a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more if a proper POP chain is present. This vulnerability has been fixed in version 4.1.3.
Affected versions: max 4.1.3.
Status: vulnerable