What’s Vulnerable › Products
dglingren Media Library Assistant vulnerabilities
46 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your dglingren Media Library Assistant version is affected
Latest dglingren Media Library Assistant vulnerabilities
- CVE-2026-118095 — WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-103875 — Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links (CVSS 4.7)
- CVE-2026-115594 — WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability (CVSS 6.5)
- CVE-2026-97295 — WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2026-115948 — WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-95609 — WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-97294 — WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-97293 — WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-6642 — Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import (CVSS 6.4)
- CVE-2026-6641 — Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter (CVSS 6.4)
- CVE-2026-6640 — Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter (CVSS 6.4)
- CVE-2026-66601 — WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-66600 — WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability (CVSS 9.1)
- CVE-2026-66591 — WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-61963 — WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-56012 — WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-54198 — WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-6075 — Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form (CVSS 8.1)
- CVE-2026-34897 — WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-34885 — WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-32399 — WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-3072 — Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification (CVSS 4.3)
- CVE-2025-63065 — WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2025-11738 — Media Library Assistant <= 3.29 - Unauthenticated Limited File Read (CVSS 5.3)
- CVE-2025-59590 — WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)