David Lingren vulnerabilities

Products

• Media Library Assistant 49

Newest

• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerability CVE-2026-119496 5.3 MediumNovember 7, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability CVE-2026-119491 4.3 MediumNovember 7, 2026
• david lingren media library assistant Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute CVE-2026-113482 6.8 MediumNovember 1, 2026
• david lingren media library assistant Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields CVE-2026-113481 4.3 MediumNovember 1, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability CVE-2026-118095 6.5 MediumOctober 29, 2026
• david lingren media library assistant Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links CVE-2026-103875 4.7 MediumOctober 29, 2026
• david lingren media library assistant Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF CVE-2026-113486 6.5 MediumOctober 28, 2026
• david lingren media library assistant Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF CVE-2026-113485 6.5 MediumOctober 28, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability CVE-2026-115594 6.5 MediumOctober 26, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability CVE-2026-115948 8.5 HighOctober 26, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-97295 4.3 MediumOctober 26, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability CVE-2026-95609 7.1 HighOctober 9, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability CVE-2026-97294 6.5 MediumOctober 7, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability CVE-2026-97293 8.5 HighSeptember 30, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import CVE-2026-6642 6.4 MediumSeptember 11, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter CVE-2026-6640 6.4 MediumSeptember 11, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter CVE-2026-6641 6.4 MediumSeptember 11, 2026
• david lingren media library assistant Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector CVE-2026-16959 6.8 MediumAugust 21, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability CVE-2026-66601 6.5 MediumAugust 20, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability CVE-2026-66600 9.1 CriticalAugust 20, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability CVE-2026-66591 6.5 MediumAugust 18, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability CVE-2026-61963 7.1 HighAugust 6, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability CVE-2026-56012 8.5 HighJune 18, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-54198 7.1 HighJune 16, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form CVE-2026-6075 8.1 HighMay 29, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability CVE-2026-34897 6.5 MediumApril 6, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability CVE-2026-34885 8.5 HighApril 6, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability CVE-2026-32399 8.5 HighMarch 13, 2026
• david lingren media library assistant Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification CVE-2026-3072 4.3 MediumMarch 5, 2026
• david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability CVE-2025-63065 5.3 MediumDecember 9, 2025
• david lingren media library assistant Media Library Assistant <= 3.29 - Unauthenticated Limited File Read CVE-2025-11738 5.3 MediumOctober 18, 2025
• david lingren media library assistant WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59590 5.9 MediumSeptember 22, 2025
• david lingren media library assistant Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion CVE-2025-8357 4.3 MediumAugust 19, 2025
• david lingren media library assistant Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes CVE-2025-7035 6.4 MediumJuly 16, 2025
• david lingren media library assistant WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-31627 5.9 MediumMarch 31, 2025
• david lingren media library assistant Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters CVE-2024-11974 6.1 MediumJanuary 4, 2025
• david lingren media library assistant WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability CVE-2024-51661 9.1 CriticalNovember 4, 2024
• david lingren media library assistant Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action CVE-2024-6823 8.8 HighAugust 13, 2024
• david lingren media library assistant Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting CVE-2024-5544 6.1 MediumJuly 2, 2024
• david lingren media library assistant Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter CVE-2024-5605 8.8 HighJune 20, 2024
• david lingren media library assistant Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-3518 8.8 HighMay 21, 2024
• david lingren media library assistant Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang CVE-2024-3519 6.1 MediumMay 21, 2024
• david lingren media library assistant Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-2871 6.4 MediumApril 9, 2024
• david lingren media library assistant Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode CVE-2024-2475 6.4 MediumMarch 29, 2024
• david lingren media library assistant WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS) CVE-2023-24385 5.9 MediumOctober 17, 2023
• david lingren media library assistant Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4716 6.4 MediumSeptember 22, 2023
• david lingren media library assistant Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution CVE-2023-4634 Public exploit EPSS 85.6% 9.8 CriticalSeptember 6, 2023
• david lingren media library assistant WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-34010 5.8 MediumAugust 5, 2023
• david lingren media library assistant, media library assistant project library assistant +1 more Media Library Assistant < 3.06 - Admin+ SQLi CVE-2023-0279 7.2 HighFebruary 27, 2023
• davidlingren media library assistant, david lingren media library assistant (wordpress plugin) +1 more WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability CVE-2022-41618 3.7 LowNovember 18, 2022