enable_media_replace Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/enable_media_replace/ Thu, 23 Feb 2023 05:17:40 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png enable_media_replace Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/enable_media_replace/ 32 32 CVE-2022-2554 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2554/ Thu, 23 Feb 2023 05:17:40 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2554/ The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

The post CVE-2022-2554 appeared first on CVE Vulnerability.

]]> The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

The post CVE-2022-2554 appeared first on CVE Vulnerability.

]]> CVE-2023-0255 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0255/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0255 The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

The post CVE-2023-0255 appeared first on CVE Vulnerability.

]]> The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

The post CVE-2023-0255 appeared first on CVE Vulnerability.

]]>