ML
Product
Media Library Assistant
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 12Low 0
Watch
Add Media Library Assistant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3518 | 6.5 | May 21 | Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode Affected: before 3.16 |
| CVE-2024-11974 | 6.1 | Jan 4 | Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters Affected: through 3.23 |
| CVE-2024-5544 | 6.1 | Jul 2 | Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting Affected: before 3.18 |
| CVE-2024-3519 | 6.1 | May 21 | Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang Affected: before 3.16 |
| CVE-2023-34010 | 6.1 | Aug 5 | WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.0.7 |
| CVE-2020-11731 | 6.1 | Apr 13 | The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote… Affected: before 2.82 |
| CVE-2018-20982 | 6.1 | Aug 22 | The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens Affected: before 2.74 |
| CVE-2025-7035 | 5.4 | Jul 16 | Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes Affected: before 3.27 |
| CVE-2024-2475 | 5.4 | Mar 29 | Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode Affected: before 3.14 |
| CVE-2023-4716 | 5.4 | Sep 22 | Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 3.10 |
| CVE-2022-41618 | 5.3 | Nov 18 | WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability Affected: before 3.01 |
| CVE-2023-24385 | 4.8 | Oct 17 | WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS) Affected: before 3.12 |
Showing 12