CVE-2024-4873

MEDIUM

WordPress Replace Image <1.1.10 - Insecure Direct Object Reference

Title source: llm

Description

The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement functionality due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to replace images uploaded by higher level users such as admins.

References (3)

Core 3

Core References

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3117484%40replace-image&new=3117484%40replace-image&sfp_email=&sfph_mail=

Product

https://wordpress.org/plugins/replace-image/

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/5a5d3a62-f7e5-4776-bed9-7ff3f81da452?source=cve

Scores

CVSS v3 4.3

EPSS 0.0014

EPSS Percentile 32.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-639

Status published

Products (1)

aspengrovestudios/Replace Image < 1.1.10

Published Jun 19, 2024

Tracked Since Feb 18, 2026