Media Library Assistant vulnerabilities

3 known vulnerabilities in Media Library Assistant from Davidlingren. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Media LIbrary Assistant: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-51661Nov 4, 2024David LingrenEPSS 1.11%

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Command Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3

• 8.8 High severity

  Media Library Assistant: Unrestricted Upload of File with Dangerous Type

  CVE-2024-6823Aug 13, 2024DglingrenEPSS 1.29%

  The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline-edit-upload-scripts AJAX action in all versions up to, and including, 3.18. This makes it possible for authent

• 8.8 High severity

  Media Library Assistant: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5605Jun 20, 2024Dglingren

  The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within the mla_tag_cloud Shortcode in all versions up to, and including, 3.16 due to insufficient escaping on the user supplied parameter and l