agentprime: dglingren-media-library-assistantEvery new CVE for dglingren-media-library-assistant.https://agentprime.io/CVE-2026-103875: Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Linkshttps://agentprime.io/advisories/CVE-2026-103875/https://agentprime.io/advisories/CVE-2026-103875/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:25:33 GMTCVECVE-2026-6640: Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameterhttps://agentprime.io/advisories/CVE-2026-6640/https://agentprime.io/advisories/CVE-2026-6640/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 07:39:07 GMTCVECVE-2026-6642: Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Importhttps://agentprime.io/advisories/CVE-2026-6642/https://agentprime.io/advisories/CVE-2026-6642/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 07:39:07 GMTCVECVE-2026-6641: Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameterhttps://agentprime.io/advisories/CVE-2026-6641/https://agentprime.io/advisories/CVE-2026-6641/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 07:39:06 GMTCVECVE-2026-6075: Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Formhttps://agentprime.io/advisories/CVE-2026-6075/https://agentprime.io/advisories/CVE-2026-6075/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 07:46:48 GMTCVECVE-2026-3072: Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modificationhttps://agentprime.io/advisories/CVE-2026-3072/https://agentprime.io/advisories/CVE-2026-3072/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 05:26:31 GMTCVECVE-2025-11738: Media Library Assistant <= 3.29 - Unauthenticated Limited File Readhttps://agentprime.io/advisories/CVE-2025-11738/https://agentprime.io/advisories/CVE-2025-11738/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Oct 2025 05:41:55 GMTCVECVE-2025-8357: Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletionhttps://agentprime.io/advisories/CVE-2025-8357/https://agentprime.io/advisories/CVE-2025-8357/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 04:26:02 GMTCVECVE-2025-7035: Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodeshttps://agentprime.io/advisories/CVE-2025-7035/https://agentprime.io/advisories/CVE-2025-7035/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Jul 2025 09:22:56 GMTCVECVE-2024-11974: Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parametershttps://agentprime.io/advisories/CVE-2024-11974/https://agentprime.io/advisories/CVE-2024-11974/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jan 2025 07:24:23 GMTCVECVE-2024-6823: Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Actionhttps://agentprime.io/advisories/CVE-2024-6823/https://agentprime.io/advisories/CVE-2024-6823/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Aug 2024 05:30:55 GMTCVECVE-2024-5544: Media Library Assistant <= 3.17 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-5544/https://agentprime.io/advisories/CVE-2024-5544/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 07:37:05 GMTCVECVE-2024-5605: Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameterhttps://agentprime.io/advisories/CVE-2024-5605/https://agentprime.io/advisories/CVE-2024-5605/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Jun 2024 03:37:21 GMTCVECVE-2024-3518: Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcodehttps://agentprime.io/advisories/CVE-2024-3518/https://agentprime.io/advisories/CVE-2024-3518/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 23:30:41 GMTCVECVE-2024-3519: Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via langhttps://agentprime.io/advisories/CVE-2024-3519/https://agentprime.io/advisories/CVE-2024-3519/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 23:30:40 GMTCVECVE-2024-2871: Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcodehttps://agentprime.io/advisories/CVE-2024-2871/https://agentprime.io/advisories/CVE-2024-2871/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:08 GMTCVECVE-2024-2475: Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcodehttps://agentprime.io/advisories/CVE-2024-2475/https://agentprime.io/advisories/CVE-2024-2475/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 04:31:33 GMTCVECVE-2023-4716: Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-4716/https://agentprime.io/advisories/CVE-2023-4716/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Sep 2023 05:31:26 GMTCVECVE-2023-4634: Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Executionhttps://agentprime.io/advisories/CVE-2023-4634/https://agentprime.io/advisories/CVE-2023-4634/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.86 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Sep 2023 08:27:50 GMTCVEcritical