CVE-2026-85655 | ShortPixel Enable Media Replace Plugin up to 4.2.2 on WordPress Capability Check doReplaceQuery authorization

October 28, 2026 Yanac

A vulnerability categorized as problematic has been discovered in ShortPixel Enable Media Replace Plugin up to 4.2.2 on WordPress. Affected is the function doReplaceQuery of the component Capability Check. Such manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-85655. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More