What’s Vulnerable › Products

shortpixel Enable Media Replace vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your shortpixel Enable Media Replace version is affected

Latest shortpixel Enable Media Replace vulnerabilities

• CVE-2026-57722 — WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2026-5714 — Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter (CVSS 6.4)
• CVE-2026-2732 — Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace (CVSS 5.4)
• CVE-2025-9496 — Enable Media Replace <= 4.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_modified Shortcode (CVSS 6.4)
• CVE-2025-31081 — WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-6737 — Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-4643 — Enable Media Replace < 4.1.3 - Author+ PHP Object Injection (CVSS 8.8)
• CVE-2023-0255 — Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload (CVSS 8.8)
• CVE-2022-2554 — Enable Media Replace < 4.0.0 - Admin+ Path Traversal (CVSS 4.9)