Dglingren vulnerabilities

Products

• Media Library Assistant 19

Newest

• david lingren media library assistant Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links CVE-2026-103875 4.7 MediumOctober 29, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import CVE-2026-6642 6.4 MediumSeptember 11, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter CVE-2026-6640 6.4 MediumSeptember 11, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter CVE-2026-6641 6.4 MediumSeptember 11, 2026
• david lingren media library assistant Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form CVE-2026-6075 8.1 HighMay 29, 2026
• david lingren media library assistant Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification CVE-2026-3072 4.3 MediumMarch 5, 2026
• david lingren media library assistant Media Library Assistant <= 3.29 - Unauthenticated Limited File Read CVE-2025-11738 5.3 MediumOctober 18, 2025
• david lingren media library assistant Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion CVE-2025-8357 4.3 MediumAugust 19, 2025
• david lingren media library assistant Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes CVE-2025-7035 6.4 MediumJuly 16, 2025
• david lingren media library assistant Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters CVE-2024-11974 6.1 MediumJanuary 4, 2025
• david lingren media library assistant Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action CVE-2024-6823 8.8 HighAugust 13, 2024
• david lingren media library assistant Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting CVE-2024-5544 6.1 MediumJuly 2, 2024
• david lingren media library assistant Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter CVE-2024-5605 8.8 HighJune 20, 2024
• david lingren media library assistant Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-3518 8.8 HighMay 21, 2024
• david lingren media library assistant Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang CVE-2024-3519 6.1 MediumMay 21, 2024
• david lingren media library assistant Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-2871 6.4 MediumApril 9, 2024
• david lingren media library assistant Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode CVE-2024-2475 6.4 MediumMarch 29, 2024
• david lingren media library assistant Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4716 6.4 MediumSeptember 22, 2023
• david lingren media library assistant Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution CVE-2023-4634 Public exploit EPSS 85.6% 9.8 CriticalSeptember 6, 2023