Browse CVEs

MEDIUM 5.4 CVE-2025-7035 The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mla_tag_cloud and mla_term_list shortc… Media Library Assistant 3.27+ Fix from $1,6002025-07-16 MEDIUM 6.1 CVE-2024-11974 The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘smc_settings_tab', 'unattachfixit-action', … Media Library Assistant after 3.23 Fix from $1,6002025-01-04 HIGH 7.2 CVE-2024-51661 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant med… Media Library Assistant 3.20+ Fix from $1,9502024-11-04 HIGH 8.8 CVE-2024-6823 The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline… Media Library Assistant 3.19+ Fix from $1,9502024-08-13 MEDIUM 6.1 CVE-2024-5544 The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all versions up to, and i… Media Library Assistant 3.18+ Fix from $1,6002024-07-02 HIGH 8.8 CVE-2024-5605 The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within the mla_tag_cloud Shortco… Media Library Assistant 3.17+ Fix from $1,9502024-06-20 MEDIUM 6.5 CVE-2024-3518 The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3… Media Library Assistant 3.16+ Fix from $1,6002024-05-22 MEDIUM 6.1 CVE-2024-3519 The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the lang parameter in all versions up to, and in… Media Library Assistant 3.16+ Fix from $1,6002024-05-22 HIGH 7.7 CVE-2024-2871 The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3… Media Library Assistant 3.14+ Fix from $1,9502024-04-09 MEDIUM 5.4 CVE-2024-2475 The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and … Media Library Assistant 3.14+ Fix from $1,6002024-03-29 MEDIUM 5.4 CVE-2023-4716 The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to, and … Media Library Assistant after 3.10 Fix from $1,6002023-09-22 CRITICAL 9.8 CVE-2023-4634EPSS 83% The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.… Media Library Assistant 3.10+ Fix from $2,3002023-09-06 MEDIUM 6.1 CVE-2023-34010 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin  <= 3.0.7 versions. Media Library Assistant after 3.0.7 Fix from $1,6002023-08-05 MEDIUM 5.3 CVE-2022-41618 Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress. Media Library Assistant 3.01+ Fix from $1,6002022-11-18 CRITICAL 9.8 CVE-2020-11928 In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query paramet… Media Library Assistant 2.82+ Fix from $2,3002020-04-20 HIGH 7.5 CVE-2020-11732 The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download. Media Library Assistant 2.82+ Fix from $1,9502020-04-13 MEDIUM 6.1 CVE-2020-11731 The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, … Media Library Assistant 2.82+ Fix from $1,6002020-04-13 MEDIUM 6.1 CVE-2018-20982 The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screen… Media Library Assistant 2.74+ Fix from $1,6002019-08-22