David Lingren vulnerabilities
25 published CVEs name David Lingren among the affected products.
- Published CVEs
- 25
- Last 12 months
- 19
- Critical
- 2
- Known exploited
- 0
Critical 2High 8Medium 14Low 1Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20232
- 20241
- 20253
- 202618
Newest CVEs
- CVE-2026-119496
WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerability
David Lingren · Media LIbrary Assistant
Medium5.3 - CVE-2026-119491
WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability
David Lingren · Media LIbrary Assistant
Medium4.3 - CVE-2026-118095
WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability
David Lingren · Media LIbrary Assistant
Medium6.5 - CVE-2026-115594
WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability
David Lingren · Media LIbrary Assistant
Medium6.5 - CVE-2026-115948
WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability
David Lingren · Media LIbrary Assistant
High8.5 - CVE-2026-97295
WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability
David Lingren · Media LIbrary Assistant
Medium4.3 - CVE-2026-95609
WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
David Lingren · Media LIbrary Assistant
High7.1 - CVE-2026-97294
WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
David Lingren · Media LIbrary Assistant
Medium6.5 - CVE-2026-97293
WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
David Lingren · Media LIbrary Assistant
High8.5 - CVE-2026-66601
WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
David Lingren · Media LIbrary Assistant
Medium6.5
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)12
- CWE-89 SQL injection5
- CWE-200 Exposure of sensitive information1
- CWE-201 1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-434 Unrestricted file upload1
- CWE-532 Sensitive information in a log file1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-78 OS command injection1
- CWE-80 Basic cross-site scripting1