Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

dglingren

dglingren Media Library Assistant vulnerabilities

19 published CVEs name dglingren Media Library Assistant among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-103875

    Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links

    dglingren · Media Library Assistant

    Medium4.7
  • CVE-2026-6640

    Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter

    dglingren · Media Library Assistant

    Medium6.4
  • CVE-2026-6642

    Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import

    dglingren · Media Library Assistant

    Medium6.4
  • CVE-2026-6641

    Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter

    dglingren · Media Library Assistant

    Medium6.4
  • CVE-2026-6075

    Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form

    dglingren · Media Library Assistant

    High8.1
  • CVE-2026-3072

    Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification

    dglingren · Media Library Assistant

    Medium4.3
  • CVE-2025-11738

    Media Library Assistant <= 3.29 - Unauthenticated Limited File Read

    dglingren · Media Library Assistant

    Medium5.3
  • CVE-2025-8357

    Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion

    dglingren · Media Library Assistant

    Medium4.3
  • CVE-2025-7035

    Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes

    dglingren · Media Library Assistant

    Medium6.4
  • CVE-2024-11974

    Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters

    dglingren · Media Library Assistant

    Medium6.1
All 19 in the list