media_library_assistant

暂无产品描述。

davidlingrenwordpress

关联漏洞

共找到 3 条公开漏洞记录

高危CVE-2026-348852026/06/25

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant <= 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.

media_library_assistantPoC 已收录

CVSS—

严重CVE-2023-46342023/09/06

Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion

A vulnerability in the Wordpress Media-Library-Assistant plugins in version < 3.09 is vulnerable to a local file inclusion which leading to RCE on default Imagegick installation/configuration.

media_library_assistantPoC 已收录RCE

CVSS9.8EPSS 92.5%

高危CVE-2020-117322020/04/13

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.

media_library_assistantPoC 已收录

CVSS7.5