plugin

Replace Image Vulnerabilities

1 known security issue reported for the Replace Image WordPress plugin. Most recent disclosed Jun 18, 2024.

1 medium

Running Replace Image on your site? Check whether your installed version is affected.

Replace Image <= 1.1.10 - Insecure Direct Object Reference

medium

The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement functionality due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to rep...

CVSS:: 4.3
Affected:: up to 1.1.10
Fixed in:: 1.1.11
Disclosed:: Jun 18, 2024

CVE-2024-4873 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database