Skip to contentDavid Lingren Media Library Assistant vulnerabilities
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerabilityCVE-2026-1194965.3 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerabilityCVE-2026-1194914.3 Medium
- david lingren media library assistantMedia Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode AttributeCVE-2026-1134826.8 Medium
- david lingren media library assistantMedia Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fieldsCVE-2026-1134814.3 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1180956.5 Medium
- david lingren media library assistantMedia Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination LinksCVE-2026-1038754.7 Medium
- david lingren media library assistantMedia Library Assistant < 3.42 - Trashed Attachment Deletion via CSRFCVE-2026-1134866.5 Medium
- david lingren media library assistantMedia Library Assistant < 3.42 - Bulk Attachment Deletion via CSRFCVE-2026-1134856.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerabilityCVE-2026-1155946.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerabilityCVE-2026-1159488.5 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-972954.3 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-956097.1 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-972946.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerabilityCVE-2026-972938.5 High
- david lingren media library assistantMedia Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/ImportCVE-2026-66426.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes ParameterCVE-2026-66406.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode ParameterCVE-2026-66416.4 Medium
- david lingren media library assistantMedia Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connectorCVE-2026-169596.8 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-666016.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerabilityCVE-2026-666009.1 Critical
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-665916.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-619637.1 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerabilityCVE-2026-560128.5 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2026-541987.1 High
- david lingren media library assistantMedia Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action FormCVE-2026-60758.1 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-348976.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerabilityCVE-2026-348858.5 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerabilityCVE-2026-323998.5 High
- david lingren media library assistantMedia Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy ModificationCVE-2026-30724.3 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerabilityCVE-2025-630655.3 Medium
- david lingren media library assistantMedia Library Assistant <= 3.29 - Unauthenticated Limited File ReadCVE-2025-117385.3 Medium
- david lingren media library assistantWordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-595905.9 Medium
- david lingren media library assistantMedia Library Assistant <= 3.27 - Authenticated (Author+) Limited File DeletionCVE-2025-83574.3 Medium
- david lingren media library assistantMedia Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list ShortcodesCVE-2025-70356.4 Medium
- david lingren media library assistantWordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-316275.9 Medium
- david lingren media library assistantMedia Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action ParametersCVE-2024-119746.1 Medium
- david lingren media library assistantWordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerabilityCVE-2024-516619.1 Critical
- david lingren media library assistantMedia Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX ActionCVE-2024-68238.8 High
- david lingren media library assistantMedia Library Assistant <= 3.17 - Reflected Cross-Site ScriptingCVE-2024-55446.1 Medium
- david lingren media library assistantMedia Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order ParameterCVE-2024-56058.8 High
- david lingren media library assistantMedia Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-35188.8 High
- david lingren media library assistantMedia Library Assistant <= 3.15 - Reflected Cross-Site Scripting via langCVE-2024-35196.1 Medium
- david lingren media library assistantMedia Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-28716.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery ShortcodeCVE-2024-24756.4 Medium
- david lingren media library assistantWordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)CVE-2023-243855.9 Medium
- david lingren media library assistantMedia Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-47166.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code ExecutionCVE-2023-4634Public exploitEPSS 85.6%9.8 Critical
- david lingren media library assistantWordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)CVE-2023-340105.8 Medium
- david lingren media library assistant, media library assistant project library assistant +1 moreMedia Library Assistant < 3.06 - Admin+ SQLiCVE-2023-02797.2 High
- davidlingren media library assistant, david lingren media library assistant (wordpress plugin) +1 moreWordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerabilityCVE-2022-416183.7 Low