TI-2025-03808 CVE-2025-4279 · GHSA-f6pm-4wh2-f46p
External image replace <= 1.0.8 - Authenticated (Contributor+) Arbitrary File Upload
Priority MEDIUM 41
The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'external_image_replace_get_posts::replace_post' function in all versions up to, and incl…