ML
Product
Media Library Assistant
17
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 13Low 0
Watch
Add Media Library Assistant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6823 | 8.8 | Aug 13 | Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action Affected: through 3.18 |
| CVE-2024-5605 | 8.8 | Jun 20 | Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter Affected: through 3.16 |
| CVE-2026-6075 | 8.1 | May 29 | Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form Affected: through 3.35 |
| CVE-2024-2871 | 7.7 | Apr 9 | Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode Affected: through 3.13 |
Showing 4