WordPress Enable Media Replace Plugin SQL Injection and Arbitrary File Upload Vulnerabilities

Enable Media Replace is a PHP-based plug-in for the WordPress blogging application. The application is exposed to multiple input validation issues because it fails to sufficiently sanitize user-supplied data, Enable Media Replace version 2.3 is affected.Ref: http://www.securityfocus.com/bid/46286 11.8.29 - CVE: Not AvailablePlatform: Web Application