Login Request a demo
ML
Product
Media Library Assistant
by Davidlingren · last CVE Jul 16, 2025
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 2High 5Medium 12Low 0
Severity
All severities19Critical2High5Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Media Library Assistant to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6823
8.8
1%
Aug 13
Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action
Affected: before 3.19
CVE-2024-5605
8.8
1%
Jun 20
Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter
Affected: before 3.17
CVE-2024-2871
7.7
0%
Apr 9
Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode
Affected: before 3.14
CVE-2020-11732
7.5
5%
Apr 13
The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download
Affected: before 2.82
CVE-2024-51661
7.2
1%
Nov 4
WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability
Affected: before 3.20
Showing 5