CVE-2023-0255
Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
HIGH 8.8EPSS 1.1%
The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
- Affected
- Enable Media Replace
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.10% chance of exploitation in the next 30 days, 65th percentile
- Published
- 2023-02-13
- Updated
- 2025-03-21