{"metadata": {"vulnerability": "CVE-2026-85655", "count": 17, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 10}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-04T13:13:08.079Z", "date_only": false, "value": "2026-09-04T13:13:08.079Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85655", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-04T13:28:15Z", "date_only": false, "value": "2026-09-04T13:28:15.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-85655", "field": "containers.cna.timeline.0.time", "text": "Vendor Notified"}, {"timestamp": "2026-10-27T18:45:07Z", "date_only": false, "value": "2026-10-27T18:45:07.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-85655", "field": "containers.cna.timeline.1.time", "text": "Disclosed"}, {"timestamp": "2026-10-28T00:16:30Z", "date_only": false, "value": "2026-10-28T00:16:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-85655", "record": "CVE-2026-85655", "field": "creation_timestamp", "uuid": "4d13a001-f17b-4362-a97f-49566c866f9c", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-85655"}, {"timestamp": "2026-10-28T07:48:29.420Z", "date_only": false, "value": "2026-10-28T07:48:29.420Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85655", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T07:48:29.420Z", "date_only": false, "value": "2026-10-28T07:48:29.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-85655", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T07:57:26.975Z", "date_only": false, "value": "2026-10-28T07:57:26.975808Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117517467410926853", "record": "CVE-2026-85655", "field": "creation_timestamp", "uuid": "3c44670b-a051-4f73-8a13-418aa83f1724", "content": "CVE-2026-85655 Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to modify the post_content of any published post referencing the replaced media \u2014 including Administrator-owned posts \u2014 making changes immediately visible to unauthenticated visitors. The doReplaceQuery() method performs a database-wide search-and-replace across all posts containing the old media URL without any per-post capability check, meaning a single Author-triggered request can silently overwrite a large number of posts that WordPress's standard admin UI and REST API would otherwise forbid that user from editing.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85655https://www.wordfence.com/threat-intel/vulnerabilities/id/aff42473-63c6-41ca-8312-058f213e2302?source=cvehttps://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.2.2/build/shortpixel/replacer/src/Replacer.php#L250https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.2.2/classes/ViewController/UploadViewController.php#L59https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.2.2/classes/ViewController/UploadViewController.php#L66https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.2.2/classes/Controller/ReplaceController.php#L253https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.1.9/build/shortpixel/replacer/src/Replacer.php#L250https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.1.9/classes/ViewController/UploadViewController.php#L59https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.1.9/classes/ViewController/UploadViewController.php#L66https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.1.9/classes/Controller/ReplaceController.php#L253https://github.com/short-pixel-optimizer/enable-media-replace/releases/tag/v4.2.3#wordpress #shortpixel #EnableMediaReplace#CVE_2026_85655#bot", "url": "https://infosec.exchange/users/cve/statuses/117517467410926853"}, {"timestamp": "2026-10-28T08:16:30Z", "date_only": false, "value": "2026-10-28T08:16:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-582X-674X-HC38", "record": "GHSA-582X-674X-HC38", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T08:16:30.083Z", "date_only": false, "value": "2026-10-28T08:16:30.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85655", "record": "FKIE_CVE-2026-85655", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:31:56Z", "date_only": false, "value": "2026-10-28T09:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-582X-674X-HC38", "record": "GHSA-582X-674X-HC38", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T09:31:56Z", "date_only": false, "value": "2026-10-28T09:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-582X-674X-HC38", "record": "GHSA-582X-674X-HC38", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T01:28:20.530Z", "date_only": false, "value": "2026-10-29T01:28:20.530450Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85655", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-29T01:28:20.530Z", "date_only": false, "value": "2026-10-29T01:28:20.530450Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85655", "record": "FKIE_CVE-2026-85655", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-29T01:33:58.264Z", "date_only": false, "value": "2026-10-29T01:33:58.264055Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3myy4q7i6ca2t", "record": "CVE-2026-85655", "field": "creation_timestamp", "uuid": "24e298c8-9da0-4481-afe7-c6c6bb4e0f2f", "content": "CVE-2026-85655: falla en Enable Media Replace de WordPress\n\nConoc\u00e9 los detalles del cve 2026 85655 de wordfence y c\u00f3mo afecta a tu sitio WordPress. Enterate m\u00e1s y aplic\u00e1 las recomendaciones de seguridad ahora.\n\n#cve202685655 #wordfence #enablemediareplace #wordpress #shortpixel", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3myy4q7i6ca2t"}, {"timestamp": "2026-10-29T01:41:49.939Z", "date_only": false, "value": "2026-10-29T01:41:49.939Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85655", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T01:41:49.939Z", "date_only": false, "value": "2026-10-29T01:41:49.939Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85655", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T23:10:00.223Z", "date_only": false, "value": "2026-11-04T23:10:00.223", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85655", "record": "FKIE_CVE-2026-85655", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-11T11:27:21.497Z", "anchors": {"origin": {"timestamp": "2026-10-28T07:48:29.420Z", "date_only": false, "value": "2026-10-28T07:48:29.420Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85655", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T07:48:29.420Z", "date_only": false, "value": "2026-10-28T07:48:29.420Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85655", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1222732.077122, "hours": 339.6477992005556, "days": 14.151991633356483, "min_seconds": 1222732.077122, "max_seconds": 1222732.077122, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T07:48:29.420Z", "date_only": false, "value": "2026-10-28T07:48:29.420Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85655", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T11:27:21.497Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}