WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
media-library-assistant
Published
2025-07-15
Title
Media Library Assistant < 3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
Slug
media-library-assistant
Published
2025-08-18
Title
Media Library Assistant < 3.28 - Authenticated (Author+) Limited File Deletion
Slug
media-library-assistant
Published
2025-09-22
Title
Media Library Assistant < 3.29 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2025-10-17
Title
Media Library Assistant < 3.30 - Unauthenticated Limited File Read
Slug
media-library-assistant
Published
2025-10-09
Title
Media Library Assistant < 3.30 - Missing Authorization
Slug
media-library-assistant
Published
2026-03-04
Title
Media Library Assistant < 3.34 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification
Slug
media-library-assistant
Published
2026-04-06
Title
Media Library Assistant < 3.35 - Authenticated (Contributor+) SQL Injection
Slug
media-library-assistant
Published
2026-04-06
Title
Media Library Assistant < 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-02-20
Title
Media LIbrary Assistant < 3.33 - Authenticated (Contributor+) SQL Injection
Slug
media-library-assistant
Published
2026-05-28
Title
Media Library Assistant < 3.36 - Cross-Site Request Forgery via Bulk Action Form
Slug
media-library-assistant
Published
2026-06-18
Title
Media Library Assistant < 3.36 - Authenticated (Contributor+) SQL Injection
Slug
media-library-assistant
Published
2026-06-15
Title
Media Library Assistant < 3.36 - Reflected Cross-Site Scripting
Slug
media-library-assistant
Published
2026-08-04
Title
Media Library Assistant < 3.39 - Unauthenticated Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-08-19
Title
Media Library Assistant < 3.40 - Authenticated (Author+) Arbitrary File Upload
Slug
media-library-assistant
Published
2026-08-18
Title
Media Library Assistant < 3.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-08-19
Title
Media Library Assistant < 3.40 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-08-19
Title
Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
Slug
media-library-assistant
Published
2026-09-10
Title
Media Library Assistant < 3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter
Slug
media-library-assistant
Published
2026-09-10
Title
Media Library Assistant < 3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter
Slug
media-library-assistant
Published
2026-09-10
Title
Media Library Assistant < 3.36 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import
Slug
media-library-assistant
Published
2026-09-30
Title
Media Library Assistant < 3.42 - Authenticated (Contributor+) SQL Injection
Slug
media-library-assistant
Published
2026-10-07
Title
Media Library Assistant < 3.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-10-03
Title
Media Library Assistant < 3.42 - Unauthenticated Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-10-26
Title
Media Library Assistant < 3.43 - Authenticated (Contributor+) Information Exposure
Slug
media-library-assistant
Published
2026-10-26
Title
Media Library Assistant < 3.43 - Authenticated (Author+) SQL Injection