WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
media-library-assistant
Published
2025-03-31
Title
Media Library Assistant < 3.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2025-07-15
Title
Media Library Assistant < 3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
Slug
media-library-assistant
Published
2025-08-18
Title
Media Library Assistant < 3.28 - Authenticated (Author+) Limited File Deletion
Slug
media-library-assistant
Published
2025-09-22
Title
Media Library Assistant < 3.29 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2025-10-17
Title
Media Library Assistant < 3.30 - Unauthenticated Limited File Read
Slug
media-library-assistant
Published
2025-10-09
Title
Media Library Assistant <= 3.30 - Missing Authorization
Slug
media-library-categories
Published
2014-08-01
Title
Media Library Categories <= 1.0.6 - SQL Injection
Slug
media-library-categories
Published
2014-08-01
Title
Media Library Categories <= 1.1.1 - Cross Site Scripting
Slug
media-library-downloader
Published
2025-04-24
Title
Media Library Downloader < 1.3.2 - Missing Authorization
Slug
media-library-downloader
Published
2025-12-04
Title
Media Library Downloader <= 1.4.0 - Cross-Site Request Forgery
Slug
media-library-helper
Published
2023-07-05
Title
Media Library Helper by Codexin < 1.3.0 - Cross-Site Request Forgery
Slug
media-library-plus
Published
2022-09-30
Title
Media Library Folders < 7.1.2 - Plugin Reset via CSRF
Slug
media-library-plus
Published
2024-03-28
Title
Media Library Folders < 8.1.8 - Authenticated (Author+) SQL Injection
Slug
media-library-plus
Published
2024-04-05
Title
Media Library Folders < 8.1.9 - Authenticated (Author+) Directory Traversal
Slug
media-library-plus
Published
2024-04-18
Title
Media Library Folders < 8.2.1 - Reflected Cross-Site Scripting via 's'
Slug
media-library-plus
Published
2024-08-29
Title
Media Library Folders < 8.2.4 - Missing Authorization on Various Functions
Slug
media-library-plus
Published
2024-08-28
Title
Media Library Folders < 8.2.3 - Authenticated (Subscriber+) Second-Order SQL Injection
Slug
media-library-plus
Published
2025-02-14
Title
Media Library Folders < 8.3.1 - Missing Authorization to Plugin Settings Change
Slug
media-library-tools
Published
2024-10-31
Title
Media Library Tools < 1.5.0 - Author+ Stored XSS via SVG
Slug
media-library-tools
Published
2025-12-11
Title
Media Library Tools < 1.7.0 - Authenticated (Author+) SQL Injection
Slug
media-list
Published
2023-11-03
Title
Medialist < 1.4.1 - Contributor+ Stored XSS
Slug
media-list
Published
2023-11-08
Title
Medialist < 1.4.0 - Contributor+ Stored XSS
Slug
media-mirror
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
media-modal
Published
2024-10-31
Title
Media Modal <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
media-net-ads-manager
Published
2024-07-26
Title
Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload