dglingren vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20247
3. 20254
4. 20266

Newest CVEs

• CVE-2026-103875

  Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links

  dglingren · Media Library Assistant

  Medium4.7
• CVE-2026-6640

  Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter

  dglingren · Media Library Assistant

  Medium6.4
• CVE-2026-6642

  Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import

  dglingren · Media Library Assistant

  Medium6.4
• CVE-2026-6641

  Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter

  dglingren · Media Library Assistant

  Medium6.4
• CVE-2026-6075

  Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form

  dglingren · Media Library Assistant

  High8.1
• CVE-2026-3072

  Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification

  dglingren · Media Library Assistant

  Medium4.3
• CVE-2025-11738

  Media Library Assistant <= 3.29 - Unauthenticated Limited File Read

  dglingren · Media Library Assistant

  Medium5.3
• CVE-2025-8357

  Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion

  dglingren · Media Library Assistant

  Medium4.3
• CVE-2025-7035

  Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes

  dglingren · Media Library Assistant

  Medium6.4
• CVE-2024-11974

  Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters

  dglingren · Media Library Assistant

  Medium6.1