NA

CVE-2023-4643

Published: 16/10/2023 Updated: 07/11/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The Enable Media Replace WordPress plugin prior to 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog

Vulnerable Product Search on Vulmon Subscribe to Product

shortpixel enable media replace