Approved changes feed: RSS · Atom

cpe:2.3:a:david_lingren:media_library_assistant:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDavid Lingren (58ec31f0-eea3-59b4-bae7-c67c30492819)
ProductMedia Library Assistant (3ffaa98e-2c27-5e9d-b759-8b22f1a3c1e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56012 vulnerable 2026-07-29 01:00:28.729895 WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue affects Media LIbrary Assistant: from n/a through 3.35.
Published: 2026-06-18T14:02:38.042Z
Updated: 2026-06-18T16:10:48.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54198 vulnerable 2026-07-29 01:00:27.638178 WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.
Published: 2026-06-16T09:00:38.625Z
Updated: 2026-06-16T17:10:25.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34897 vulnerable 2026-06-08 07:59:13.287404 WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.34.
Published: 2026-04-06T14:50:48.088Z
Updated: 2026-04-06T16:53:41.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34885 vulnerable 2026-06-08 07:59:13.282799 WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.
Published: 2026-04-06T14:47:31.754Z
Updated: 2026-04-06T15:24:38.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32399 vulnerable 2026-06-08 07:57:17.525686 WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.32.
Published: 2026-03-13T11:42:12.062Z
Updated: 2026-04-29T09:51:58.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63065 vulnerable 2026-06-08 07:39:17.247209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59590 vulnerable 2026-06-08 07:35:22.392363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31627 vulnerable 2026-06-08 07:18:58.250954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51661 vulnerable 2026-06-08 06:52:12.629139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34010 vulnerable 2026-06-08 06:06:24.199864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24385 vulnerable 2026-06-08 05:56:05.367872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.