Product by ShortPixel

    Enable Media Replace

    11 known vulnerabilities in Enable Media Replace (ShortPixel), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Enable Media Replace (ShortPixel)
    HighCVE-2026-73186

    WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

    		8.8
    HighCVE-2023-4643

    Enable Media Replace < 4.1.3 - Author+ PHP Object Injection

    		8.8
    HighCVE-2023-0255

    Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload

    		8.8
    MediumCVE-2022-2554

    Enable Media Replace < 4.0.0 - Admin+ Path Traversal

    		4.9
    MediumCVE-2026-85655

    ShortPixel Enable Media Replace: Missing Authorization

    		4.3
    HighCVE-2025-31081

    WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-5714

    ShortPixel Enable Media Replace: Cross-site Scripting

    		6.4
    MediumCVE-2026-57722

    WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2025-9496

    ShortPixel Enable Media Replace: Cross-site Scripting

    		6.4
    MediumCVE-2026-2732

    ShortPixel Enable Media Replace: Missing Authorization

    		5.4
    MediumCVE-2023-6737

    Enable Media Replace <= 4.1.4 - Reflected Cross-Site Scripting

    		4.7

    All products by ShortPixel