high8.8
CVE-2023-4643
The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PH…
Impact
The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shortpixel | Enable Media Replace | before 4.1.3 |