Advisories · Technology

Media Library Assistant.

Every CVE that names Media Library Assistant among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-113482 CVE record

CVSS 6.8 Medium

Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute
- Media Library Assistant
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2026
CVE-2026-113481 CVE record

CVSS 4.3 Medium

Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields
- Media Library Assistant
- Broken access control
Not analysed yet 1 Nov 2026
CVE-2026-113486 CVE record

CVSS 6.5 Medium

Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF
- Media Library Assistant
- Cross-site request forgery (CSRF)
Not analysed yet 28 Oct 2026
CVE-2026-113485 CVE record

CVSS 6.5 Medium

Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF
- Media Library Assistant
- Cross-site request forgery (CSRF)
Not analysed yet 28 Oct 2026
CVE-2026-16959 CVE record

CVSS 6.8 Medium

Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
- Media Library Assistant
- SQL injection
Not analysed yet 21 Aug 2026
CVE-2023-0279 CVE record

CVSS 7.2 High

Media Library Assistant < 3.06 - Admin+ SQLi
- Media Library Assistant
Not analysed yet 27 Feb 2023