short-pixel-optimizer/enable-media-replace

Releases32

Frequency2 months 2 weeks

Last Release 2 months ago

Stars23

Enable Media Replace WordPress plugin

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-2732 ↗	Mar 4, 2026Wednesday, 4 March 2026, 07:16	5.4 MEDIUM	—
The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewController::load' function in all versions up to, and including, 4.1.7. This makes it possible for authenticated attackers, with Author-level access and above, to replace any attachment with a removed background attachment.