Skip to content
OpenAdvisories

Product · ShortPixel

Enable Media Replace

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-73186

    WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.

    ShortPixel Enable Media Replace
  • High 7.1
    CVE-2025-31081

    WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel Enable Media Replace enable-media-replace allows Reflected XSS.This issue affects Enable Media Replace: from n/a through <= 4.1.5.

    ShortPixel Enable Media Replace