Media Library Assistant
Approved changes feed: RSS · Atom
cpe:2.3:a:david_lingren:media_library_assistant:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | David Lingren (58ec31f0-eea3-59b4-bae7-c67c30492819) |
|---|---|
| Product | Media Library Assistant (3ffaa98e-2c27-5e9d-b759-8b22f1a3c1e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-118095 |
vulnerable | 2026-11-03 10:17:04.523331 |
WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows DOM-Based XSS.This issue affects Media LIbrary Assistant: from n/a through 3.42.
Published: 2026-10-29T14:29:27.704Z
Updated: 2026-10-29T16:49:18.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115594 |
vulnerable | 2026-11-03 10:15:37.714831 |
WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Retrieve Embedded Sensitive Data.This issue affects Media LIbrary Assistant: from n/a through 3.42.
Published: 2026-10-26T10:28:26.944Z
Updated: 2026-10-26T12:54:34.035Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115948 |
vulnerable | 2026-11-03 10:15:37.294008 |
WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42.
Published: 2026-10-26T10:08:37.779Z
Updated: 2026-10-26T12:54:35.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-97295 |
vulnerable | 2026-11-03 10:15:27.368037 |
WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.
Published: 2026-10-26T10:01:28.037Z
Updated: 2026-10-26T10:23:40.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56012 |
vulnerable | 2026-07-29 01:00:28.729895 |
WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection.
This issue affects Media LIbrary Assistant: from n/a through 3.35.
Published: 2026-06-18T14:02:38.042Z
Updated: 2026-06-18T16:10:48.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54198 |
vulnerable | 2026-07-29 01:00:27.638178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34897 |
vulnerable | 2026-06-08 07:59:13.287404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34885 |
vulnerable | 2026-06-08 07:59:13.282799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32399 |
vulnerable | 2026-06-08 07:57:17.525686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63065 |
vulnerable | 2026-06-08 07:39:17.247209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59590 |
vulnerable | 2026-06-08 07:35:22.392363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31627 |
vulnerable | 2026-06-08 07:18:58.250954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51661 |
vulnerable | 2026-06-08 06:52:12.629139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34010 |
vulnerable | 2026-06-08 06:06:24.199864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24385 |
vulnerable | 2026-06-08 05:56:05.367872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.