Skip to content
Noroxi

davidlingren records

19 published records for vendor davidlingren.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
15.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 22
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2023-4634
    65This week

    Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

    CriticalCVSS 9.8Proof of conceptEPSS 85%

    davidlingren · media library assistantSep 6, 2023

  • CVE-2020-11928
    40Plan

    In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_quer

    CriticalCVSS 9.8No exploitEPSS 3%

    davidlingren · media library assistantApr 19, 2020

  • CVE-2024-6823
    35Monitor

    Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action

    HighCVSS 8.8No exploitEPSS 1%

    davidlingren · media library assistantAug 13, 2024

  • CVE-2024-5605
    35Monitor

    Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter

    HighCVSS 8.8No exploitEPSS 0%

    davidlingren · media library assistantJun 20, 2024

  • CVE-2020-11732
    31Monitor

    The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.

    HighCVSS 7.5Proof of conceptEPSS 4%

    davidlingren · media library assistantApr 12, 2020

  • CVE-2024-2871
    30Monitor

    Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode

    HighCVSS 7.7No exploitEPSS 0%

    davidlingren · media library assistantApr 9, 2024

  • CVE-2024-51661
    28Monitor

    WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    davidlingren · media library assistantNov 4, 2024

  • CVE-2024-3518
    26Monitor

    Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 0%

    davidlingren · media library assistantMay 21, 2024

  • CVE-2020-11731
    24Monitor

    The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assista

    MediumCVSS 6.1No exploitEPSS 1%

    davidlingren · media library assistantApr 12, 2020

  • CVE-2018-20982
    24Monitor

    The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin subme

    MediumCVSS 6.1No exploitEPSS 0%

    davidlingren · media library assistantAug 22, 2019

  • CVE-2024-11974
    24Monitor

    Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters

    MediumCVSS 6.1No exploitEPSS 0%

    davidlingren · media library assistantJan 4, 2025

  • CVE-2023-34010
    24Monitor

    WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    davidlingren · media library assistantAug 5, 2023

  • CVE-2024-5544
    24Monitor

    Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    davidlingren · media library assistantJul 2, 2024

  • CVE-2024-3519
    24Monitor

    Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang

    MediumCVSS 6.1No exploitEPSS 0%

    davidlingren · media library assistantMay 21, 2024

  • CVE-2022-41618
    21Monitor

    WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    davidlingren · media library assistantNov 18, 2022

  • CVE-2023-4716
    21Monitor

    Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    davidlingren · media library assistantSep 22, 2023

  • CVE-2024-2475
    21Monitor

    Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    davidlingren · media library assistantMar 29, 2024

  • CVE-2025-7035
    21Monitor

    Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes

    MediumCVSS 5.4No exploitEPSS 0%

    davidlingren · media library assistantJul 16, 2025

  • CVE-2023-24385
    19Monitor

    WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    davidlingren · media library assistantOct 17, 2023