High · 8.7 CVE-2022-46850 EUVD-2022-49631GHSA-f2f5-9rhp-q563

WordPress Easy Media Replace Plugin <= 0.1.3 is vulnerable to Arbitrary File Deletion

Published Jun 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (author+) Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin <= 0.1.3 versions.

Vendor	Product	Affected	Fixed
Nabil Lemsieh	Easy Media Replace	≤ 0.1.3	—