Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewController::load' function in all versions up to, and including, 4.1.7. This makes it possible for authenticated attackers, with Author-level access and above, to replace any attachment with a removed background attachment.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-04 | 2 | Disclosure2 |
| 2026-03-05 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-2732 📊 Severity: 5.4 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2732 #CVE-2026-2732 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/InUKdnNatB
Post summary
The tweet announces a new CVE (CVE‑2026‑2732) with medium severity affecting WordPress, providing a link to the NVD detail page.
🚨*CVE* CVE-2026-2732 The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewControl… https://www.cve.org/CVERecord?id=CVE-2026-2732 ----- Traducción: CVE-2026-2732 El … http://infoflow.cloud`
Post summary
The post announces CVE-2026-2732, noting that the Enable Media Replace plugin for WordPress allows unauthorized data modification due to an improper capability check.
CVE-2026-2732 The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewControl… https://www.cve.org/CVERecord?id=CVE-2026-2732
Post summary
The Enable Media Replace plugin for WordPress is affected by CVE-2026-2732, which allows unauthorized data modification because of an improper capability check.