CVE-2025-7035

< 3.27

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mla_tag_cloud and m

6.4MEDIUM

CVE-2024-11974

<= 3.23

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘smc_settings_tab', 'un

6.1MEDIUM

CVE-2024-51661

< 3.20

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LI

9.1CRITICAL

CVE-2024-6823

< 3.19

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation invol

8.8HIGH

CVE-2024-5544

< 3.18

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all ve

6.1MEDIUM

CVE-2024-5605

< 3.17

The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within th

8.8HIGH

CVE-2024-3519

< 3.16

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the lang parameter in all ver

6.1MEDIUM

CVE-2024-3518

< 3.16

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up t

8.8HIGH

CVE-2024-2871

< 3.14

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up t

6.4MEDIUM

CVE-2024-2475

< 3.14

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all v

6.4MEDIUM

CVE-2023-24385

< 3.12

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in David Lingren Media Library Assistant plugin <= 3.11 versions.

5.9MEDIUM

CVE-2023-4716

<= 3.10

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in v

6.4MEDIUM

CVE-2023-4634

< 3.10

The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to

9.8CRITICAL

CVE-2023-34010

<= 3.0.7

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin <= 3.0

5.8MEDIUM

CVE-2023-0279

< 3.06

The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQ

7.2HIGH

CVE-2022-41618

< 3.01

Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.

3.7LOW

CVE-2020-11928

< 2.82

In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or

9.8CRITICAL

CVE-2020-11732

< 2.82

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link

7.5HIGH

CVE-2020-11731

< 2.82

The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Libra

6.1MEDIUM

CVE-2018-20982

< 2.74

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant a

6.1MEDIUM