CVE-2026-2732 | Enable Media Replace Plugin up to 4.1.7 on WordPress load improper authorization

A vulnerability categorized as critical has been discovered in Enable Media Replace Plugin up to 4.1.7 on WordPress. The impacted element is the function RemoveBackGroundViewController::load. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-2732. The attack may be performed from remote. There is no available exploit.