Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Media Library Assistant MEDIUM 5.4
CVE-2025-7035

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mla_tag_cloud and mla_term_list shortc…

Fix: 3.27+
Fix from $1,600 2025-07-16
Media Library Assistant MEDIUM 6.1
CVE-2024-11974

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘smc_settings_tab', 'unattachfixit-action', …

Fix: after 3.23
Fix from $1,600 2025-01-04
Media Library Assistant HIGH 7.2
CVE-2024-51661

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant med…

Fix: 3.20+
Fix from $1,950 2024-11-04
Media Library Assistant HIGH 8.8
CVE-2024-6823

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline…

Fix: 3.19+
Fix from $1,950 2024-08-13
Media Library Assistant MEDIUM 6.1
CVE-2024-5544

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all versions up to, and i…

Fix: 3.18+
Fix from $1,600 2024-07-02
Media Library Assistant HIGH 8.8
CVE-2024-5605

The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within the mla_tag_cloud Shortco…

Fix: 3.17+
Fix from $1,950 2024-06-20
Media Library Assistant MEDIUM 6.5
CVE-2024-3518

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3…

Fix: 3.16+
Fix from $1,600 2024-05-22
Media Library Assistant MEDIUM 6.1
CVE-2024-3519

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the lang parameter in all versions up to, and in…

Fix: 3.16+
Fix from $1,600 2024-05-22
Media Library Assistant HIGH 7.7
CVE-2024-2871

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3…

Fix: 3.14+
Fix from $1,950 2024-04-09
Media Library Assistant MEDIUM 5.4
CVE-2024-2475

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and …

Fix: 3.14+
Fix from $1,600 2024-03-29
Media Library Assistant MEDIUM 5.4
CVE-2023-4716

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to, and …

Fix: after 3.10
Fix from $1,600 2023-09-22
Media Library Assistant CRITICAL 9.8
CVE-2023-4634EPSS 83%

The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.…

Fix: 3.10+
Fix from $2,300 2023-09-06
Media Library Assistant MEDIUM 6.1
CVE-2023-34010

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin  <= 3.0.7 versions.

Fix: after 3.0.7
Fix from $1,600 2023-08-05
Media Library Assistant MEDIUM 5.3
CVE-2022-41618

Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.

Fix: 3.01+
Fix from $1,600 2022-11-18
Media Library Assistant CRITICAL 9.8
CVE-2020-11928

In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query paramet…

Fix: 2.82+
Fix from $2,300 2020-04-20
Media Library Assistant HIGH 7.5
CVE-2020-11732

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.

Fix: 2.82+
Fix from $1,950 2020-04-13
Media Library Assistant MEDIUM 6.1
CVE-2020-11731

The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, …

Fix: 2.82+
Fix from $1,600 2020-04-13
Media Library Assistant MEDIUM 6.1
CVE-2018-20982

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screen…

Fix: 2.74+
Fix from $1,600 2019-08-22