Skip to contentDavidlingren Media Library Assistant vulnerabilities
- david lingren media library assistantMedia Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list ShortcodesCVE-2025-70356.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action ParametersCVE-2024-119746.1 Medium
- david lingren media library assistantWordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerabilityCVE-2024-516619.1 Critical
- david lingren media library assistantMedia Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX ActionCVE-2024-68238.8 High
- david lingren media library assistantMedia Library Assistant <= 3.17 - Reflected Cross-Site ScriptingCVE-2024-55446.1 Medium
- david lingren media library assistantMedia Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order ParameterCVE-2024-56058.8 High
- david lingren media library assistantMedia Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-35188.8 High
- david lingren media library assistantMedia Library Assistant <= 3.15 - Reflected Cross-Site Scripting via langCVE-2024-35196.1 Medium
- david lingren media library assistantMedia Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-28716.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery ShortcodeCVE-2024-24756.4 Medium
- david lingren media library assistantWordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)CVE-2023-243855.9 Medium
- david lingren media library assistantMedia Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-47166.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code ExecutionCVE-2023-4634Public exploitEPSS 85.6%9.8 Critical
- david lingren media library assistantWordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)CVE-2023-340105.8 Medium
- davidlingren media library assistant, david lingren media library assistant (wordpress plugin) +1 moreWordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerabilityCVE-2022-416183.7 Low
- davidlingren media library assistantIn the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur...CVE-2020-119289.8 Critical
- davidlingren media library assistantThe Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS...CVE-2020-117316.1 Medium
- davidlingren media library assistantThe Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion...CVE-2020-117327.5 High
- davidlingren media library assistantThe media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or...CVE-2018-209826.1 Medium