İçeriğe atla
Noroxi

davidlingren kayıtları

davidlingren üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%15,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2023-4634
    65Bu hafta

    Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    davidlingren · media library assistant6 Eyl 2023

  • CVE-2020-11928
    40Planlayın

    In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_quer

    KritikCVSS 9,8İstismar yokEPSS %4

    davidlingren · media library assistant19 Nis 2020

  • CVE-2024-6823
    35İzleyin

    Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action

    YüksekCVSS 8,8İstismar yokEPSS %1

    davidlingren · media library assistant13 Ağu 2024

  • CVE-2024-5605
    35İzleyin

    Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter

    YüksekCVSS 8,8İstismar yokEPSS %1

    davidlingren · media library assistant20 Haz 2024

  • CVE-2020-11732
    31İzleyin

    The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    davidlingren · media library assistant12 Nis 2020

  • CVE-2024-2871
    30İzleyin

    Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode

    YüksekCVSS 7,7İstismar yokEPSS %0

    davidlingren · media library assistant9 Nis 2024

  • CVE-2024-51661
    28İzleyin

    WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    davidlingren · media library assistant4 Kas 2024

  • CVE-2024-3518
    26İzleyin

    Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode

    OrtaCVSS 6,5İstismar yokEPSS %1

    davidlingren · media library assistant21 May 2024

  • CVE-2020-11731
    24İzleyin

    The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assista

    OrtaCVSS 6,1İstismar yokEPSS %1

    davidlingren · media library assistant12 Nis 2020

  • CVE-2018-20982
    24İzleyin

    The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin subme

    OrtaCVSS 6,1İstismar yokEPSS %1

    davidlingren · media library assistant22 Ağu 2019

  • CVE-2024-11974
    24İzleyin

    Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters

    OrtaCVSS 6,1İstismar yokEPSS %0

    davidlingren · media library assistant4 Oca 2025

  • CVE-2023-34010
    24İzleyin

    WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    davidlingren · media library assistant5 Ağu 2023

  • CVE-2024-5544
    24İzleyin

    Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    davidlingren · media library assistant2 Tem 2024

  • CVE-2024-3519
    24İzleyin

    Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang

    OrtaCVSS 6,1İstismar yokEPSS %0

    davidlingren · media library assistant21 May 2024

  • CVE-2022-41618
    21İzleyin

    WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %1

    davidlingren · media library assistant18 Kas 2022

  • CVE-2023-4716
    21İzleyin

    Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %1

    davidlingren · media library assistant22 Eyl 2023

  • CVE-2024-2475
    21İzleyin

    Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    davidlingren · media library assistant29 Mar 2024

  • CVE-2025-7035
    21İzleyin

    Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes

    OrtaCVSS 5,4İstismar yokEPSS %0

    davidlingren · media library assistant16 Tem 2025

  • CVE-2023-24385
    19İzleyin

    WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    davidlingren · media library assistant17 Eki 2023