Davidlingren vulnerabilities

Products

• Media Library Assistant 19

Newest

• david lingren media library assistant Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes CVE-2025-7035 6.4 MediumJuly 16, 2025
• david lingren media library assistant Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters CVE-2024-11974 6.1 MediumJanuary 4, 2025
• david lingren media library assistant WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability CVE-2024-51661 9.1 CriticalNovember 4, 2024
• david lingren media library assistant Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action CVE-2024-6823 8.8 HighAugust 13, 2024
• david lingren media library assistant Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting CVE-2024-5544 6.1 MediumJuly 2, 2024
• david lingren media library assistant Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter CVE-2024-5605 8.8 HighJune 20, 2024
• david lingren media library assistant Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-3518 8.8 HighMay 21, 2024
• david lingren media library assistant Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang CVE-2024-3519 6.1 MediumMay 21, 2024
• david lingren media library assistant Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-2871 6.4 MediumApril 9, 2024
• david lingren media library assistant Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode CVE-2024-2475 6.4 MediumMarch 29, 2024
• david lingren media library assistant WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS) CVE-2023-24385 5.9 MediumOctober 17, 2023
• david lingren media library assistant Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4716 6.4 MediumSeptember 22, 2023
• david lingren media library assistant Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution CVE-2023-4634 Public exploit EPSS 85.6% 9.8 CriticalSeptember 6, 2023
• david lingren media library assistant WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-34010 5.8 MediumAugust 5, 2023
• davidlingren media library assistant, david lingren media library assistant (wordpress plugin) +1 more WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability CVE-2022-41618 3.7 LowNovember 18, 2022
• davidlingren media library assistant In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur... CVE-2020-11928 9.8 CriticalApril 19, 2020
• davidlingren media library assistant The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS... CVE-2020-11731 6.1 MediumApril 13, 2020
• davidlingren media library assistant The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion... CVE-2020-11732 7.5 HighApril 13, 2020
• davidlingren media library assistant The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or... CVE-2018-20982 6.1 MediumAugust 22, 2019