Skip to content
OpenAdvisories

Product · aspengrovestudios

Replace Image

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-4873

    Replace Image <= 1.1.10 - Insecure Direct Object Reference

    The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement functionality due to missing validation on a user controlled key. This makes it possible for authen…

    aspengrovestudios Replace Image Web / CMS