WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
media-library-assistant
Published
2024-03-28
Title
Media Library Assistant < 3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode
Slug
media-library-assistant
Published
2024-05-21
Title
Media Library Assistant < 3.16 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
media-library-assistant
Published
2024-05-21
Title
Media Library Assistant < 3.16 - Reflected Cross-Site Scripting
Slug
media-library-assistant
Published
2024-06-19
Title
Media Library Assistant < 3.17 - Authenticated (Contributor+) SQL Injection via order Parameter
Slug
media-library-assistant
Published
2024-07-01
Title
Media Library Assistant < 3.18 - Reflected Cross-Site Scripting
Slug
media-library-assistant
Published
2024-08-12
Title
Media Library Assistant < 3.19 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action
Slug
media-library-assistant
Published
2024-11-01
Title
Media Library Assistant < 3.20 - Authenticated (Administrator+) Remote Code Execution
Slug
media-library-assistant
Published
2025-01-03
Title
Media Library Assistant < 3.24 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters
Slug
media-library-assistant
Published
2025-03-31
Title
Media Library Assistant < 3.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2025-07-15
Title
Media Library Assistant < 3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
Slug
media-library-assistant
Published
2025-08-18
Title
Media Library Assistant < 3.28 - Authenticated (Author+) Limited File Deletion
Slug
media-library-assistant
Published
2025-09-22
Title
Media Library Assistant < 3.29 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2025-10-17
Title
Media Library Assistant < 3.30 - Unauthenticated Limited File Read
Slug
media-library-assistant
Published
2025-10-09
Title
Media Library Assistant < 3.30 - Missing Authorization
Slug
media-library-assistant
Published
2026-03-04
Title
Media Library Assistant < 3.34 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification
Slug
media-library-assistant
Published
2026-04-06
Title
Media Library Assistant < 3.35 - Authenticated (Contributor+) SQL Injection
Slug
media-library-assistant
Published
2026-04-06
Title
Media Library Assistant < 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
media-library-assistant
Published
2026-02-20
Title
Media LIbrary Assistant < 3.33 - Authenticated (Contributor+) SQL Injection
Slug
media-library-categories
Published
2014-08-01
Title
Media Library Categories <= 1.0.6 - SQL Injection
Slug
media-library-categories
Published
2014-08-01
Title
Media Library Categories <= 1.1.1 - Cross Site Scripting
Slug
media-library-downloader
Published
2025-04-24
Title
Media Library Downloader < 1.3.2 - Missing Authorization
Slug
media-library-downloader
Published
2025-12-04
Title
Media Library Downloader <= 1.4.0 - Cross-Site Request Forgery
Slug
media-library-file-size
Published
2026-01-21
Title
Media Library File Size < 1.6.8 - Missing Authorization
Slug
media-library-helper
Published
2023-07-05
Title
Media Library Helper by Codexin < 1.3.0 - Cross-Site Request Forgery
Slug
media-library-plus
Published
2022-09-30
Title
Media Library Folders < 7.1.2 - Plugin Reset via CSRF