CVE-2025-4279 | External Image Replace Plugin up to 1.0.8 on WordPress replace_post unrestricted upload

A vulnerability classified as critical was found in External Image Replace Plugin up to 1.0.8 on WordPress. Affected by this vulnerability is the function external_image_replace_get_posts::replace_post. The manipulation leads to unrestricted upload.

This vulnerability is known as CVE-2025-4279. The attack can be launched remotely. There is no exploit available.