Description
The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example
References (1)
Core 1
Core References
Exploit, Third Party Advisory
https://wpscan.com/vulnerability/5872f4bf-f423-4ace-b8b6-d4cc4f6ca8d9
Scores
CVSS v3
4.9
EPSS
0.0078
EPSS Percentile
51.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-22
Status
published
Products (1)
shortpixel/enable_media_replace
< 4.0.0
Published
Oct 10, 2022
Tracked Since
Feb 18, 2026