Media Library Assistant (Unknown) - vulnerabilities (CVEs)

4 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-28. Vendor: Unknown.

CVEs of Media Library Assistant

• CVE-2026-113486 - CVSS 6.5 (medium), 2026-10-28: The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty Trash media action, so a forged cross-site request can…
• CVE-2026-113485 - CVSS 6.5 (medium), 2026-10-28: The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Library bulk-action handler, checking the…
• CVE-2026-16959 - CVSS 6.8 (medium), 2026-08-21: The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its…
• CVE-2023-0279 - CVSS 7.2 (high), 2023-02-27: The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a…