Advisories · Technology

David Lingren Media LIbrary Assistant.

Every CVE that names David Lingren Media LIbrary Assistant among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118095 CVE record

CVSS 6.5 Medium

WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-115594 CVE record

CVSS 6.5 Medium

WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability
- David Lingren Media LIbrary Assistant
- Information disclosure
Not analysed yet 26 Oct 2026
CVE-2026-115948 CVE record

CVSS 8.5 High

WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability
- David Lingren Media LIbrary Assistant
- SQL injection
Not analysed yet 26 Oct 2026
CVE-2026-97295 CVE record

CVSS 4.3 Medium

WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site request forgery (CSRF)
Not analysed yet 26 Oct 2026
CVE-2026-95609 CVE record

CVSS 7.1 High

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2026
CVE-2026-97294 CVE record

CVSS 6.5 Medium

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-97293 CVE record

CVSS 8.5 High

WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
- David Lingren Media LIbrary Assistant
- SQL injection
Not analysed yet 30 Sept 2026
CVE-2026-66601 CVE record

CVSS 6.5 Medium

WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2026-66600 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability
- David Lingren Media LIbrary Assistant
- Unrestricted file upload
Not analysed yet 20 Aug 2026
CVE-2026-66591 CVE record

CVSS 6.5 Medium

WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2026
CVE-2026-61963 CVE record

CVSS 7.1 High

WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2026-56012 CVE record

CVSS 8.5 High

WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability
- David Lingren Media LIbrary Assistant
- SQL injection
Not analysed yet 18 Jun 2026
CVE-2026-54198 CVE record

CVSS 7.1 High

WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 16 Jun 2026
CVE-2026-34897 CVE record

CVSS 6.5 Medium

WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 6 Apr 2026
CVE-2026-34885 CVE record

CVSS 8.5 High

WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability
- David Lingren Media LIbrary Assistant
- SQL injection
Not analysed yet 6 Apr 2026
CVE-2026-32399 CVE record

CVSS 8.5 High

WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability
- David Lingren Media LIbrary Assistant
- SQL injection
Not analysed yet 13 Mar 2026
CVE-2025-63065 CVE record

CVSS 5.3 Medium

WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability
- David Lingren Media LIbrary Assistant
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-59590 CVE record

CVSS 5.9 Medium

WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025
CVE-2025-31627 CVE record

CVSS 5.9 Medium

WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability
- David Lingren Media LIbrary Assistant
- Cross-site scripting (XSS)
Not analysed yet 31 Mar 2025
CVE-2024-51661 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability
- David Lingren Media LIbrary Assistant
- Command injection
Not analysed yet 4 Nov 2024
CVE-2023-24385 CVE record

CVSS 5.9 Medium

WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)
- David Lingren Media Library Assistant
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2023
CVE-2023-34010 CVE record

CVSS 5.8 Medium

WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)
- David Lingren Media Library Assistant
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2023